Privacy Policy

Adherlo is operated by Setbase GmbH, Zurich, Switzerland. Setbase GmbH is the controller responsible for the personal data processed through Adherlo, unless a separate agreement states otherwise.

For privacy requests, contact privacy@adherlo.com. For product support, contact support@adherlo.com.

This Privacy Policy applies to the Adherlo mobile app, Adherlo website, account services, medication adherence features, smart pillbox features, caregiver alert features, subscription features, and related backend services.

It does not replace any separate agreement that may apply to institutional, clinical trial, or partner deployments.

The data we collect depends on the features you use and the permissions you grant.

• Account data: email address, authentication and session identifiers, preferred language, and profile settings.
• Medication and adherence data: medication names and details entered by you, schedules, reminders, intake logs, and adherence statistics.
• Pillbox and device data: pillbox identifiers, Bluetooth Low Energy identifiers, device status, setup state, firmware or protocol status, sync status, and Wi-Fi provisioning status.
• Caregiver data: caregiver contact details added by you, alert preferences, and missed-intake alert context.
• Notification data: push notification tokens, reminder preferences, and notification delivery settings.
• Subscription data: App Store purchase and entitlement status, product identifiers, and transaction confirmation data needed to manage subscriptions.
• Technical data: app version, device model, operating system, crash or diagnostic data if enabled, and network or service status needed for reliability.
• Website and cookie data: essential site storage, language or theme preferences, cookie consent choices, and analytics data only if you enable optional analytics on the website.
• Permission-based data: Bluetooth access, camera scanning, Wi-Fi network information, and location permission for Wi-Fi setup. Location is used only to detect the Wi-Fi network during pillbox setup and is not stored as location history.

We use personal data only for the purposes described below.

• Create, operate, and secure your account.
• Provide medication reminders and adherence tracking.
• Connect, configure, and sync the Adherlo smart pillbox.
• Send local notifications and push notifications.
• Enable caregiver missed-intake alerts when configured by you.
• Verify subscription access.
• Provide customer support.
• Operate the website, remember cookie preferences, and measure website performance when optional analytics consent is granted.
• Maintain security, prevent abuse, debug crashes, and improve reliability.
• Comply with legal obligations.

Where the GDPR, Swiss Federal Act on Data Protection, or similar rules apply, we rely on the following legal bases.

• Contract necessity for account, medication, pillbox, subscription, and core app services.
• Consent for optional permissions such as notifications, camera, Bluetooth where applicable, location or Wi-Fi access, and optional biometric login.
• Legitimate interests for security, reliability, fraud prevention, and service diagnostics.
• Legal obligation where records must be kept for compliance.

Medication schedules and intake logs may reveal health-related information. Adherlo handles this data only to provide medication adherence services, reminders, pillbox sync, caregiver alerts configured by you, and support.

Adherlo does not sell personal data, does not show ads, and does not use health-related data for advertising.

Adherlo asks for permissions only when they are needed for a feature.

• Bluetooth: used to connect securely to the Adherlo pillbox.
• Camera: used to scan medication barcodes and supported 2D matrix codes.
• Notifications: used to send medication reminders and caregiver-related alerts.
• Location and Wi-Fi network access: used to detect the current Wi-Fi network during pillbox setup. Adherlo does not store location history.
• Face ID, Touch ID, or biometrics: optional local login convenience. Biometric templates stay managed by your device operating system and are not sent to Adherlo.

Adherlo does not sell personal data and does not show ads. We share data only when needed to provide the service, comply with law, protect users, or operate our business under appropriate confidentiality and data protection terms.

Processors and service providers are required to protect personal data in a manner consistent with this Privacy Policy and applicable law.

• Authentication providers used to sign in and secure accounts.
• Cloud hosting and backend infrastructure used to operate Adherlo services.
• Push notification providers, including Apple Push Notification service and Firebase Cloud Messaging where configured.
• Apple services and App Store billing systems used to manage subscriptions and entitlements.
• Email, SMS, or communication providers if caregiver alerts or support communications use those channels.
• Crash and diagnostic services if diagnostics are enabled.
• Website analytics providers, such as Google Analytics, only if optional website analytics consent is granted.

Adherlo stores and processes data primarily in Switzerland where applicable. Some service providers may process personal data outside Switzerland or the EEA.

When international transfers occur, we use appropriate safeguards such as contractual protections, processor commitments, and legally recognized transfer mechanisms.

We keep account and service data while your account is active. We keep medication, intake, pillbox, caregiver, and subscription records for as long as needed to provide the service, meet legal obligations, resolve disputes, maintain security, and protect against abuse.

You may request deletion by contacting privacy@adherlo.com. Deletion may not immediately remove data from encrypted backups or records that must be retained for legal, security, or compliance reasons. Backup and compliance data is isolated from active use and deleted according to applicable retention schedules.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data. You may also object to certain processing, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority.

In Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch.

Adherlo is not intended for children under 13 without parental consent. If a parent or guardian believes a child provided personal data without proper consent, they should contact privacy@adherlo.com.

Adherlo uses TLS for data in transit, platform secure storage where available for sensitive tokens, access controls, internal security review, and data minimization.

No system is perfectly secure. You should protect your device, operating system account, app account, and credentials.

Adherlo helps with reminders and adherence tracking. It is not a substitute for professional medical advice, diagnosis, treatment, or emergency care.

Always consult a qualified healthcare professional before making medication or medical decisions.

Policy updates will be posted on this page. Significant changes may also be announced in-app or by another appropriate channel and may require renewed consent where required by law.

Privacy: privacy@adherlo.com

Support: support@adherlo.com

Company: Setbase GmbH, Zurich, Switzerland