App privacy · Pillen&Puffer
Scope and controller
These notices apply to the Android app Pills&Prompt, also named Pillen&Puffer and Pilules&Pings. The publisher and privacy contact is Andreas Oberacker, rainbow-data; full contact details appear at the end of this page.
Local entries
Medication names, strength, schedules, as-needed intakes and cancellations, stock, replenishment quantities, expiry dates, notes, practice details and absences are stored in this app’s private storage on your device. They serve only the organisational features you use. The publisher does not receive these entries and cannot access your local catalogue. There are no automatic uploads, registration, user profiles, advertisements, analytics or tracking services.
The app has no internet permission. The database is not additionally encrypted with its own database password; protection also depends on Android, your screen lock and device security. Backups that you explicitly create are password-encrypted.
Contacts and photos
Practice import reads only the contact details you select and creates a local copy. You choose a phone number, email or address separately using the system picker; no full address book permission is requested. The app does not search the rest of your address book or synchronise subsequent contact changes. You can enter practices manually without using the picker.
You select photos of the pack, container and medication through Android’s photo picker. The app accesses the selected images, saves reduced local copies and does not retain their EXIF or GPS metadata. Originals remain unchanged. A photo provider may itself supply cloud-stored images; its own rules apply.
Reminders and phone use
The app uses Android notifications and alarms for reminders. Intake notifications contain medication details; a neutral lock-screen version is provided. Visibility and permissions also depend on your Android settings.
The optional phone-use reminder responds to device unlocking or use. The latest detected unlock time, waiting reminders and test settings are stored locally. No sleep, fitness, sensor or location data is collected. Unlocking does not prove that you are awake or have taken medication.
Backup, retention and deletion
Automatic Android cloud backup and device transfer are disabled in the app configuration. You can explicitly create a password-encrypted backup and save it through Android’s file picker at a location you choose. If you choose a cloud provider, it may store or transfer that encrypted file. The app does not upload it itself. Language and phone-use reminder settings are not included in this catalogue backup.
Entries remain locally until you delete them or remove the app’s data. Old intake times are archived when changed; intake records remain until their medication is deleted. Deleting a medication also removes its schedules and records; unused photo copies are cleaned up. External backups, original photos and sent messages must be deleted separately in their respective apps.
External apps and Wero
At your request, a prescription email containing medication details is prepared in an external email app. You review and send it yourself. A call opens the phone app. Those apps process data under their own rules.
Voluntary Wero support opens only a fixed support link in a browser or suitable Wero/banking app. No medication, intake or practice details are attached. Wero and banks process payments and connection data under their own privacy notices. The publisher may receive the usual incoming-payment details such as name, amount, date and reference. The app stores no payment data, tracks no payments and does not query payment status. Copying the Wero link places only that public link in Android’s clipboard.
The publisher’s website has its own privacy notices. Displaying the legal notice, privacy information and philosophy locally does not load a website.
Voluntary support reminder
A local starting date is saved when the app first opens with this feature. No sooner than six months later, and then no more often than every six months, a voluntary support reminder appears when opening the app. The reminder date and disable setting stay on your device and are not part of the catalogue backup. No payment status is collected and no additional notification is sent. You can disable the reminder in Options; an explicit test does not change the automatic date.
Contact and legal bases
If you contact the publisher, your sender address and message are used to handle the request. Please do not send health data to app support. Depending on its purpose, a contact request is handled under GDPR Article 6(1)(b) or (f); the legitimate interest is answering the request. Payment records serve processing and, where required, legal duties under Article 6(1)(b) and (c). Contact contents are deleted after completion unless retention duties or necessary legal defence require otherwise; payment records follow statutory retention periods. The publisher creates no health profiles and sells no user data.
Your rights
Where the publisher processes your personal data, applicable conditions govern your rights to access, rectification, erasure, restriction, portability and objection; consent may be withdrawn for the future. You may complain to a supervisory authority, particularly the data protection and freedom of information commissioner of Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de). You manage local app data yourself on your device.
Updated: 21 October 2026
Package leaflets
Optional PZN, leaflet link, source, saved date and imported PDF are stored locally in the catalogue and encrypted backup. Android’s document picker is used for import. Your chosen PDF viewer receives temporary read access to a copy and processes it under its own policies. Links and external search open only when tapped. External providers process connection data and search details entered on their sites. The app does not automatically send medicine lists or retrieve leaflets in the background. Local PDFs do not update automatically.
Package scanning and PDF sharing
Scanning uses your permitted camera and processes codes locally using ZXing. Camera images are not stored or transmitted. Only PZN and expiry you explicitly accept are saved; serial and batch numbers are not stored. Scanning is not an authenticity check. An Android-shared PDF can be assigned to an existing medicine after your selection, using the file access granted by Android. No automatic database searches occur.
Local package text recognition
An optional camera photo or Android-selected image is processed locally using the bundled ML Kit text model. The app has no internet permission; images and results are not sent to a server. New photos are held temporarily in app cache and removed after processing or cancellation; selected originals remain unchanged. Only explicitly accepted information is saved with the medicine form. Personal doses are not inferred.
When you tap online search, the current medicine name is passed through your browser to Gebrauchsinformation 4.0 as the search term. No other medicine or practice details are attached.
Practices, insurance and travel list (21 October 2026)
Optional practice websites and closures, health insurance, civil-service benefits and travel insurance details are stored locally and included in explicitly created encrypted backups. These details are not transmitted automatically. Insurance and benefits reference numbers do not appear in notifications or travel medication lists. Opening a practice website or map app shares the destination with the selected service; its privacy rules apply. Practice closures are used for local prescription planning. The optional travel medication CSV export includes medication names, strengths, quantities, units and trip details, and is not encrypted. It excludes insurance and practice details. You choose where to save it; cloud provider terms apply if selected. Exported files and older backups remain after deleting records in the app and must be deleted separately.
Benefits fields appear only when private insurance and “Civil servant — eligible for Beihilfe” are selected. This choice is stored locally and included in encrypted backups. Hidden details remain stored until you change them or delete the insurance details.
These notices apply to the Android app Pills&Prompt, also named Pillen&Puffer and Pilules&Pings. The publisher and privacy contact is Andreas Oberacker, rainbow-data; full contact details appear at the end of this page.
Local entries
Medication names, strength, schedules, as-needed intakes and cancellations, stock, replenishment quantities, expiry dates, notes, practice details and absences are stored in this app’s private storage on your device. They serve only the organisational features you use. The publisher does not receive these entries and cannot access your local catalogue. There are no automatic uploads, registration, user profiles, advertisements, analytics or tracking services.
The app has no internet permission. The database is not additionally encrypted with its own database password; protection also depends on Android, your screen lock and device security. Backups that you explicitly create are password-encrypted.
Contacts and photos
Practice import reads only the contact details you select and creates a local copy. You choose a phone number, email or address separately using the system picker; no full address book permission is requested. The app does not search the rest of your address book or synchronise subsequent contact changes. You can enter practices manually without using the picker.
You select photos of the pack, container and medication through Android’s photo picker. The app accesses the selected images, saves reduced local copies and does not retain their EXIF or GPS metadata. Originals remain unchanged. A photo provider may itself supply cloud-stored images; its own rules apply.
Reminders and phone use
The app uses Android notifications and alarms for reminders. Intake notifications contain medication details; a neutral lock-screen version is provided. Visibility and permissions also depend on your Android settings.
The optional phone-use reminder responds to device unlocking or use. The latest detected unlock time, waiting reminders and test settings are stored locally. No sleep, fitness, sensor or location data is collected. Unlocking does not prove that you are awake or have taken medication.
Backup, retention and deletion
Automatic Android cloud backup and device transfer are disabled in the app configuration. You can explicitly create a password-encrypted backup and save it through Android’s file picker at a location you choose. If you choose a cloud provider, it may store or transfer that encrypted file. The app does not upload it itself. Language and phone-use reminder settings are not included in this catalogue backup.
Entries remain locally until you delete them or remove the app’s data. Old intake times are archived when changed; intake records remain until their medication is deleted. Deleting a medication also removes its schedules and records; unused photo copies are cleaned up. External backups, original photos and sent messages must be deleted separately in their respective apps.
External apps and Wero
At your request, a prescription email containing medication details is prepared in an external email app. You review and send it yourself. A call opens the phone app. Those apps process data under their own rules.
Voluntary Wero support opens only a fixed support link in a browser or suitable Wero/banking app. No medication, intake or practice details are attached. Wero and banks process payments and connection data under their own privacy notices. The publisher may receive the usual incoming-payment details such as name, amount, date and reference. The app stores no payment data, tracks no payments and does not query payment status. Copying the Wero link places only that public link in Android’s clipboard.
The publisher’s website has its own privacy notices. Displaying the legal notice, privacy information and philosophy locally does not load a website.
Voluntary support reminder
A local starting date is saved when the app first opens with this feature. No sooner than six months later, and then no more often than every six months, a voluntary support reminder appears when opening the app. The reminder date and disable setting stay on your device and are not part of the catalogue backup. No payment status is collected and no additional notification is sent. You can disable the reminder in Options; an explicit test does not change the automatic date.
Contact and legal bases
If you contact the publisher, your sender address and message are used to handle the request. Please do not send health data to app support. Depending on its purpose, a contact request is handled under GDPR Article 6(1)(b) or (f); the legitimate interest is answering the request. Payment records serve processing and, where required, legal duties under Article 6(1)(b) and (c). Contact contents are deleted after completion unless retention duties or necessary legal defence require otherwise; payment records follow statutory retention periods. The publisher creates no health profiles and sells no user data.
Your rights
Where the publisher processes your personal data, applicable conditions govern your rights to access, rectification, erasure, restriction, portability and objection; consent may be withdrawn for the future. You may complain to a supervisory authority, particularly the data protection and freedom of information commissioner of Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de). You manage local app data yourself on your device.
Updated: 21 October 2026
Package leaflets
Optional PZN, leaflet link, source, saved date and imported PDF are stored locally in the catalogue and encrypted backup. Android’s document picker is used for import. Your chosen PDF viewer receives temporary read access to a copy and processes it under its own policies. Links and external search open only when tapped. External providers process connection data and search details entered on their sites. The app does not automatically send medicine lists or retrieve leaflets in the background. Local PDFs do not update automatically.
Package scanning and PDF sharing
Scanning uses your permitted camera and processes codes locally using ZXing. Camera images are not stored or transmitted. Only PZN and expiry you explicitly accept are saved; serial and batch numbers are not stored. Scanning is not an authenticity check. An Android-shared PDF can be assigned to an existing medicine after your selection, using the file access granted by Android. No automatic database searches occur.
Local package text recognition
An optional camera photo or Android-selected image is processed locally using the bundled ML Kit text model. The app has no internet permission; images and results are not sent to a server. New photos are held temporarily in app cache and removed after processing or cancellation; selected originals remain unchanged. Only explicitly accepted information is saved with the medicine form. Personal doses are not inferred.
When you tap online search, the current medicine name is passed through your browser to Gebrauchsinformation 4.0 as the search term. No other medicine or practice details are attached.
Practices, insurance and travel list (21 October 2026)
Optional practice websites and closures, health insurance, civil-service benefits and travel insurance details are stored locally and included in explicitly created encrypted backups. These details are not transmitted automatically. Insurance and benefits reference numbers do not appear in notifications or travel medication lists. Opening a practice website or map app shares the destination with the selected service; its privacy rules apply. Practice closures are used for local prescription planning. The optional travel medication CSV export includes medication names, strengths, quantities, units and trip details, and is not encrypted. It excludes insurance and practice details. You choose where to save it; cloud provider terms apply if selected. Exported files and older backups remain after deleting records in the app and must be deleted separately.
Benefits fields appear only when private insurance and “Civil servant — eligible for Beihilfe” are selected. This choice is stored locally and included in encrypted backups. Hidden details remain stored until you change them or delete the insurance details.