Privacy policy.

1. Who we are

My Meds Ltd ("My Meds", "we", "us") is a company registered in England and Wales, company number 16852449. We build the My Meds UK app and this website. We are the data controller for the personal data described in this policy.

For anything about this policy or your data, write to [email protected].

2. Information we collect

What we collect depends on how you use My Meds.

Account information. Your name and the information you give us when you create an account, such as an email address used to sign in.

Medication and health information. The medicines, doses, forms and reminder schedules you add to the app, and the questions you ask our AI assistant, Roger. This is special category health data under UK GDPR, and we only process it with your explicit consent, given when you add it to the app.

NHS App connection. If you choose to connect the NHS App, we access only the information you specifically authorise during that connection. You can disconnect at any time from within the app.

Subscription information. If you subscribe to My Meds Pro, your payment is handled entirely by Apple through the App Store. We never see or store your card details; Apple shares with us only that a subscription is active and its renewal status.

Support communications. Anything you send to [email protected] or [email protected], including any attachments.

Device and usage information. Standard technical information such as device type, operating system version and app version, used to keep the app working and to diagnose problems.

3. How we use it

• To provide the core features of My Meds: medication search, interaction checking, reminders and the AI assistant.
• To ground the AI assistant's answers in official MHRA product information and show you the source document behind every answer.
• To send you the reminders and pharmacovigilance alerts you set up.
• To respond when you contact support, or report a possible side effect.
• To keep the app secure, diagnose faults, and prevent misuse.
• To meet our legal and regulatory obligations, including under pharmacovigilance law.

We do not use your medication or health data for advertising, and we do not sell your data. Ever.

4. Our legal basis for processing

For account and support data, our legal basis is performance of our contract with you and our legitimate interest in running and improving the service.

For medication and health data, which UK GDPR treats as special category data, our legal basis is your explicit consent. You give this by choosing to add medication information to the app. You can withdraw consent at any time by deleting that information or your account, as set out in Your rights below.

5. Who we share it with

We do not sell personal data. We share it only where needed to run the service:

• Infrastructure and hosting providers, who store and process data on our behalf under contract, and are not permitted to use it for their own purposes.
• Apple, to process App Store subscriptions and deliver notifications, under Apple's own privacy terms.
• NHS digital services, only where you have actively connected your NHS App account, and only for the data you authorise.
• The MHRA, only if you choose to submit a Yellow Card side-effect report through the link we provide; that report goes directly to the MHRA, not through us.
• Regulators, law enforcement or courts, where we are legally required to disclose information.

6. International transfers

Where a provider we use stores or processes data outside the UK, we put safeguards in place, such as the UK's International Data Transfer Addendum or an adequacy decision, before any transfer takes place.

7. How long we keep it

We keep account and medication data for as long as your account is active, so the app can keep working the way you expect. If you delete your account, we delete your personal data within 30 days, except where we are required to keep limited records for longer to meet a legal, regulatory or pharmacovigilance obligation.

8. Keeping it safe

We encrypt data in transit using TLS 1.3 and at rest using AES-256, and we follow the access-control and monitoring practices published on our Trust Center. No system is completely immune to risk, but we work continuously to reduce it.

9. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Ask us to delete your data, or restrict how we use it.
• Receive your data in a portable format, or ask us to transfer it.
• Object to certain processing, and withdraw consent at any time where we rely on consent.

To exercise any of these, email [email protected]. We'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

10. Cookies on this website

This website, mymedsltd.com, does not set analytics, advertising or tracking cookies, and does not use browser storage to track you. It's a static site: the only data transmitted is what your browser needs to load the pages.

11. Children

My Meds is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We'll update this page if our practices change, and update the "last updated" date above. If a change is material, we'll let you know inside the app.

13. Contact us

My Meds Ltd, company number 16852449, registered in England and Wales.

Email: [email protected]