Privacy Policy
Effective October 16, 2026
- We don't collect your data. There's no Pillshelf account and no Pillshelf server.
- What you enter stays on your devices, and in your own private iCloud database if you use iCloud.
- Label scanning and pill counting run on your device. Photos aren't uploaded anywhere.
- No ads, analytics, tracking, or third-party code in the app.
Pillshelf is an app for iPhone and iPad made by Wanderlust Labs LLC ("we" and "us" below). This policy covers the app and this website.
What the app stores, and where
Pillshelf keeps what you enter: your medications and supplements, doses and schedules, dose logs, bottles and counts, prescriptions and prescribers, pharmacies and stores, your rules, and blood draws. It also keeps your settings.
- On your device. The data is stored in the app's private storage, which iOS encrypts and other apps can't read.
- In your iCloud account, if iCloud is on. Pillshelf syncs through Apple's CloudKit to your private iCloud database. Only your Apple Account can read that database; we can't see it, and it counts against your iCloud storage, not ours. Most health details in each record (product names, strengths, doses, ingredients, notes, pharmacy names, and blood draw times) are stored in CloudKit's encrypted fields, which Apple encrypts with keys from your iCloud Keychain. Record IDs, dates, and some settings aren't. Apple's handling of iCloud data is covered by Apple's Privacy Policy.
- Label photos stay on the device that took them. They aren't synced to iCloud or included in device backups, and they're readable only while your device is unlocked. Pillshelf deletes them once the product they belong to is permanently deleted.
What runs on your device
- Label scanning uses Apple's on-device text recognition and Apple Intelligence's on-device model. The photo and its text don't leave your device.
- Pill counting uses a model built into the app. Photos aren't uploaded.
- Reminders are scheduled on your device. You can hide medication names from notifications in Settings › Reminders.
- Siri and Shortcuts. When you ask Siri to log doses, Apple processes the request under its own privacy policy. Pillshelf doesn't send anything to us.
What leaves your device because you chose to send it
- Export. If you turn on export, Pillshelf writes CSV and Markdown files to the folder you pick, such as one in iCloud Drive.
- Medication List. When you share the medication list, the PDF goes wherever you send it (AirDrop, Mail, a printer, and so on).
- Calling a pharmacy opens the Phone app with the number you saved.
Purchases
Subscriptions and purchases go through Apple. We don't receive your name, email, or payment details. Apple gives us sales reports with totals by country and product, and the app checks your purchase status with Apple on your device.
Crash reports
If you turn on Share With App Developers in Settings › Privacy & Security › Analytics & Improvements, Apple sends us crash reports and usage statistics from Pillshelf. Crash reports describe what the app was doing when it crashed. They don't contain your Pillshelf data. You can turn this off at any time.
What we don't do
- No analytics, advertising, or tracking SDKs. The app contains no third-party code that sends data anywhere.
- We don't sell, rent, or share your data. We don't have it to share.
- No data is used for advertising or to train models.
This website
pillshelf.app is a static site hosted on Cloudflare. It sets no cookies and runs no analytics or tracking scripts. Cloudflare processes your IP address and browser details to deliver the pages and protect the site from attacks, under Cloudflare's Privacy Policy.
If you email support, we get your email address and whatever you include. We use it only to answer you, and we delete support email when it's no longer needed. Please don't send health details you don't need to.
Your choices
- Delete everything: delete the app from each device. To also remove the iCloud copy, open Settings › your name › iCloud › Storage › Pillshelf (or Manage Account Storage › Pillshelf) and choose Delete Data from iCloud.
- Keep data off iCloud: turn off iCloud for Pillshelf in Settings › your name › iCloud › Apps Using iCloud.
- Take your data with you: use Settings › Export in the app.
Children
Pillshelf isn't directed to children under 13, and we don't knowingly collect anyone's personal information.
Consumer health data
Residents of Washington, Nevada, and other states with consumer health data laws can read the Consumer Health Data Privacy Policy.
Changes
If this policy changes, we'll post the new version here with a new effective date. If a change would let any of your data leave your devices or iCloud in a new way, the app will ask you first.
Contact
Questions about privacy: support@pillshelf.app.