Hello a Day Privacy Policy

Effective: November 1, 2026

MyQuietSpot Inc., a Canadian corporation ("we", "us"), operates Hello a Day (안부한알, "the app"). This policy explains what personal information the app handles, why, how long we keep it, and your rights. The Korean version is written to meet Korea's Personal Information Protection Act (PIPA); this English version says the same thing. If the Korean and English versions differ, the Korean version applies to users in Korea.

In this policy, a "parent" is anyone who chose I take the medicine in the app, and a "family member" or "child" is anyone who chose I manage someone's medicine, whatever their real relationship.

At a glance

  • Hello a Day reminds a parent when to take their medicine and lets family the parent approves see whether it was taken.
  • Medication records are health information, so we ask the parent for a separate consent to store them. Sharing them with family is another separate consent, and the parent can stop sharing at any time.
  • Records are stored on servers in Seoul, South Korea, and kept until you delete your account.
  • No ads, no advertising identifiers, and we do not sell personal information.

1. What we collect and why

Everyone

  • Account: the email address and account identifier from Apple or Google sign-in (an Apple relay address if you use Hide My Email), and, with Google sign-in, your Google account name and profile photo URL. Used to sign you in, manage your account, and answer support requests.
  • Family details: the name you enter, the names family members use for each other, your role, family connections and who can see what, invite codes, time zone, sleeping hours, and app language. Used to connect your family, work out alarm times, and display the app.
  • Device details: a push token, an app installation identifier, and the device maker, model, and OS version. Used to deliver notifications and show device-specific setup help.
  • Phone status (sent by every phone, whatever the role): when the app last sent a signal to our server, whether the permissions alarms need (such as notifications) are on, battery level, the next alarm time, and when alarms were last set on the phone. Used to check whether alarms can ring and, for a parent's phone, to let family the parent shares with know. A parent's phone status is visible only to family the parent agreed to share with; a family member's phone status is not shown to other family.
  • Notes and alerts: short notes family send and when, and alerts sent to family (missed dose, no signal from the phone, and so on) and whether someone acknowledged them. Used to deliver notes and alerts and to avoid sending the same alert twice.

Parents, after agreeing to store medication records

  • Medicines and dose records (sensitive information): medicine name, the short name you give each medicine (What you call it, e.g. blood pressure pill), dose amount and unit, dosing instructions (Instructions, e.g. 30 minutes after eating), times and days, start and end dates, whether each dose was taken, skipped, or missed and when, who recorded it (the parent or a family member on their behalf), edit history, and "away or in hospital" periods. Used to ring medicine alarms and show records.
  • Alarm logs: when alarms rang and were dismissed. Used to check that alarms ring and, if the parent agreed, to let family know.
  • Display settings: text size, colors, alarm sound and volume. Used to set up the parent's screen and alarms.

Only if you use these features

  • Medicine photos: photos of pharmacy bags, prescriptions, or medicine labels (these may show names, hospitals, or pharmacies), what the AI read from them, and a log of photo reads (time, count, result). Used to help add medicines and to manage usage limits.
  • Plus subscription (paid by family members only): whether you subscribe, when it ends, whether it auto-renews, the store, product, and original transaction ID. Used to give Plus to everyone in the family. We never receive your card details.
  • Support: your email address and message. Used to answer you.

Collected automatically

  • App usage (which screens and features are used), app version, device and OS details, an app installation identifier, approximate region (country or city level), and crash reports, through Google Firebase Analytics and Crashlytics. Used to improve the app and fix errors. These never include medicine names or doses, family names, notes, or photos, and are not linked to your name or email.
  • Server access logs (time, IP address, and similar) for security and troubleshooting (kept for 7 days).

What we do not collect: your full contact list, location (GPS), advertising identifiers, or card details. If a family member picks a parent from their contacts, that phone number and preferred way to reach them are stored only on that phone and never sent to our server. The clinic report PDF is created on the phone, and you choose who to send it to.

2. Sensitive information (medication records)

Medication records are health information under PIPA Article 23. We ask the parent directly, on the parent's own phone and on a screen separate from any other consent. A family member cannot consent on the parent's behalf.

  • What we store: the name, the short name you give it, dose, dosing instructions, and times of each medicine you take, and whether and when you took them.
  • Why: medicine alarms and showing your records.
  • How long: until you delete your account. If nobody in the family uses the app for more than 3 years, we delete it.
  • If you decline: the app needs these records to remind you, so you will not be able to use it.
  • Until the parent agrees, nobody, including family, can add medicines for them.
  • To withdraw this consent, delete your account (section 6). The app cannot work without it, so withdrawing and deleting are the same step.

Medicine photos can also contain health information, so we ask separately before any photo is read by AI (section 5). What the AI reads is only saved after you check and correct it; the AI never decides on its own.

3. What family can see (sharing with others)

We do not sell or give your personal information to other companies. We only show it to family, within what the parent agreed to:

  • Who: family members the parent has allowed to see their information.
  • Why: to see whether medicine was taken, get alerts for a missed dose or lost phone signal, add or edit medicines for the parent, and send notes.
  • What: medicines and times, whether and when each dose was taken, the parent's phone status and device details (section 1, except the push token), alarm logs, and medicine photos the parent chose to send.
  • How long: until the parent stops sharing. From then on that family member can no longer see it. If sharing is turned back on, records from the paused period become visible too.
  • If the parent declines: alarms and records still work on the parent's phone, but family cannot see doses or get alerts.
  • How to stop: Settings › Family who see my medicine › choose the person › Stop sharing.

On the free plan, family see only the last 12 months of records (the parent always sees all of their own). On Plus, family can create a clinic report PDF and send it to someone they choose, such as a doctor or pharmacist.

We may disclose information where the law requires it, for example to law enforcement following due process.

4. How long we keep it

  • Account, family details, medicines, dose records, notes: until you delete your account.
  • Families nobody has used for more than 3 years: we delete the family and all its records, and also the sign-in account and subscription record of members who do not belong to another family. Any activity (opening the app, a record changing) or a subscription that ended less than 3 years ago keeps the family.
  • Records older than 12 months on the free plan: hidden from family, not deleted. They reappear with Plus.
  • Phone check-ins: 30 days. Alarm ring/dismiss logs: 90 days. Alerts sent to family: 1 year. Family connection notices: 90 days after sending.
  • Unused invite codes: one day after they expire. Invite code attempts (abuse prevention): 30 days.
  • Medicine photos: deleted right after you save the medicines, and within a day even if you don't. Photos sent to a family member for help are deleted once handled, or after 14 days if nobody handles them.
  • What the AI read from a photo: deleted as soon as you save, discard, it expires, or you withdraw consent.
  • Photo reading logs: 400 days, for usage limits and abuse prevention. If you delete your account, they stay with your account number in hashed (scrambled) form, and no name or email.
  • Subscription record: deleted when you delete your account. Apple, Google, and RevenueCat keep their own payment records under their own policies.
  • Analytics and crash data: usage data for up to 14 months, crash data for 90 days.
  • Support emails: 3 years (our own retention period for handling inquiries and disputes).

When a retention period ends we delete the data without delay, in a way that cannot be recovered. Deleted data may remain in database backups for up to 7 days.

5. Service providers and international transfers

We use the following providers to run the service. Your information may be transferred to or processed outside Korea. App data is sent over encrypted connections whenever you use the app; support emails are transferred when you send them.

  • Supabase, Inc. (USA): database, sign-in, photo storage, and server functions. Data is stored in Seoul, South Korea (Amazon Web Services Seoul region). Items: everything in section 1 except analytics and crash data and support emails. Kept for the periods in section 4. Server functions may run in a region close to you. Contact: privacy@supabase.com
  • Google LLC (USA): (1) notification delivery (Firebase Cloud Messaging): push token and notification content (family names, notes, alert text); (2) usage and crash analysis (Firebase Analytics, Crashlytics): the automatically collected data in section 1; (3) reading medicine photos (Gemini API), only if you agreed to AI photo reading: the photo. Photos are processed on Google's servers outside Korea, may be stored temporarily in other countries while processed, and Google may log them for a period to check for misuse. Kept under Google's policies. Contact: Google's privacy inquiry form (support.google.com/policies/contact/general_privacy_form)
  • Apple Inc. (USA): Sign in with Apple, App Store payments, and delivering notifications to iPhones. Items: sign-in identifier and email address, payments (processed by Apple directly), and notification content. Kept under Apple's policies. Contact: Apple's privacy inquiry form (apple.com/legal/privacy/contact)
  • RevenueCat, Inc. (USA): checking and managing subscription status. Items: an account number we create (not your name or email), purchase and subscription details (product, period, transaction ID, store), and device and app details. RevenueCat may keep purchase records after you delete your account; email us if you want them removed and we will delete them. Contact: compliance@revenuecat.com
  • Zoho Corporation (Canada data center): receiving and answering support emails. Support emails arrive in our Zoho Mail mailbox hosted in Zoho's Canada data center. Items: email address and message content. Kept for 3 years. Contact: privacy@zohocorp.com
  • Google sign-in and Google Play payments are handled by Google under your own agreement with Google.

We are based in Canada, and our director may access personal information from Canada to run the service and provide support.

How to refuse, and what happens: these transfers are necessary to provide the service. If you do not want them, you can stop using the app and delete your account, and you will no longer be able to use it. Photos only go to Google if you separately agreed to AI photo reading. If you don't agree, or withdraw under Settings › Medicines › Withdraw AI photo reading consent, no photo is sent to Google; you can still type medicines in yourself or, if sharing is on, send the photo to family.

6. Your rights

You can ask to see, correct, or delete your personal information, ask us to stop processing it, or withdraw consent at any time.

  • In the app: edit or remove medicines (Settings › Medicines › Manage medicines), stop sharing with family, withdraw AI photo reading consent, or delete your account (Settings › Account › Delete account and data). See Delete Account for what is removed and what is kept.
  • By email: support@myquietspot.com. Writing from the email address you sign in with helps us verify you. We reply within 10 days of receiving your request.
  • A legal representative or someone you authorize can make a request for you; we may ask for proof of authorization.
  • Some requests may be limited where the law requires us to keep information or where they would harm someone else's rights. We will tell you why.

7. How we protect your information

  • All traffic between the app and our server is encrypted (HTTPS).
  • Row-level access rules on the database mean the server only lets you, and family the parent approved, read the information.
  • Consents can only be changed by the person who gave them, enforced on the server. Server-only data such as subscription and usage logs cannot be reached from the app.
  • Medicine photos are kept in private storage, and photos and AI results are not written to server logs.
  • Administrative access is limited to the minimum number of people who need it.
  • Stored data is encrypted at rest by our database provider.

8. Automatic collection tools

The app does not use cookies. Google Firebase Analytics and Crashlytics use an app installation identifier to collect usage and crash data. The app has no ads, does not collect advertising identifiers (IDFA on iPhone, advertising ID on Android), and does not link your activity with other companies' apps or websites. For this website (myquietspot.com), see our company privacy policy.

9. Age

Hello a Day is for people aged 18 or older. We do not knowingly collect information from children under 14, and we delete it without delay if we learn we have.

10. Privacy contact

  • Privacy contact (MyQuietSpot Inc.): handles privacy requests and complaints.
  • Email: support@myquietspot.com
  • Company: MyQuietSpot Inc. (Canada)

For users in Korea, these agencies can also help with privacy concerns:

  • Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (from Korea, no area code)
  • Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
  • Supreme Prosecutors' Office: www.spo.go.kr / 1301 (from Korea, no area code)
  • Korean National Police Agency, Cyber Bureau: ecrm.police.go.kr / 182 (from Korea, no area code)

11. Changes

We post changes on this page 7 days before they take effect, or 30 days before for changes that significantly affect your rights. For significant changes we also notify you by push notification or email.

12. Consumer health data (United States)

This section is our consumer health data privacy notice for residents of Washington, Nevada, and other US states with similar laws.

  • Health data we collect: the medicines added for you (name, what you call it, dose, times, instructions), your dose records (whether and when you took each dose), and medication photos if you choose to send them. It comes from you or from a family member you allowed to add medicines for you.
  • Why: to remind you at the right time, show your records, and share them with the family you choose.
  • Consent: we collect it only after you agree on the "Allow us to store your medication records" screen, and we share it with family only after you separately agree to share. You can stop sharing at any time in Settings, and you can withdraw consent by deleting your account.
  • Who receives it: the family members you chose to share with, and the service providers in section 5, which process it only on our behalf.
  • We do not sell consumer health data and do not use it for advertising.
  • Your rights: to confirm whether we collect your health data, to access it, to delete it, to withdraw consent, and to appeal our decision on a request. Email support@myquietspot.com and we will respond within 10 days. If we decline, you can appeal by replying to our answer, and you can also contact your state Attorney General.

Last updated: October 30, 2026