Privacy Policy — Ontimo Android

Updated 17 October 2026

Your medicines

Medicine lists, dose history and reference photos are stored on your device. Ontimo has no user accounts or advertising trackers. When you choose to scan a label, that image passes through our Cloudflare Worker to Anthropic for processing. Our Worker does not persist label images or extracted medicine details.

Scan credits and purchases

The scanning service stores an installation identifier, free and purchased credit balances, scan reservations and hashed purchase-token records. Purchase tokens are verified with Google Play. A recovery code saved in Settings reconnects to the same balance after reinstalling. Only its hash is stored by the server; the local code is encrypted. Keep the exported code private: anyone holding it can access the balance. We also store an app-specific SHA-256 digest of Android ID to reconnect the same Android user and signing identity to its existing balance after an ordinary reinstall. The raw Android ID is not sent. This prevents repeated starter grants; it is not used for advertising. A factory reset, different Android user, or signing identity may change this identifier, so keep a recovery code for device changes. Google refund records are checked every six hours to remove unused refunded credits. Uninstalling does not delete the server ledger.

Reminders and deletion

Android schedules reminders locally. Phone notification settings control whether reminders appear. Tapping an Ontimo reminder opens the app without its extra PIN prompt; the phone's screen lock still applies. Medicine data is removed when you clear app data or uninstall. Contact joannesun.dev@gmail.com about service-held data.

Third parties

Google Play handles payments. Cloudflare hosts the scanning service and ledger; Anthropic processes label images under its API data policies. We do not sell your data.

Ontimo Android 隱私政策

更新日期：2026 年 10 月 17 日

藥物清單、服藥紀錄與參考照片儲存在裝置上，無帳號或廣告追蹤。掃描時，照片經 Cloudflare 服務傳送至 Anthropic 辨識，我們的伺服器不保存照片或辨識出的用藥內容。

掃描服務保存安裝識別碼、免費及已購次數、掃描預留紀錄與購買權杖雜湊。購買權杖會傳送至 Google Play 驗證。在設定儲存復原碼，可於重新安裝後連回同一餘額。伺服器僅保存復原碼雜湊，本機復原碼採加密儲存。請妥善保管匯出檔，持有者可存取餘額。我們亦保存 App 專用的 Android ID SHA-256 雜湊，讓相同 Android 使用者與簽章的裝置於一般重新安裝後連回原餘額，避免重複領取免費次數。原始 Android ID 不會傳送，也不用於廣告。恢復原廠設定、不同使用者或簽章可能改變識別碼，更換裝置時請保留復原碼。系統每六小時檢查 Google 退款紀錄並移除尚未使用的退款次數。移除 App 不會刪除伺服器帳本。

提醒由 Android 在本機排程，是否顯示由手機通知設定決定。點選提醒會略過 Ontimo 額外的 PIN，手機螢幕鎖仍然有效。清除資料或移除 App 會刪除本機用藥資料。伺服器資料問題請聯絡 joannesun.dev@gmail.com。我們不販售資料。

Kebijakan Privasi Ontimo Android

Diperbarui 17 Oktober 2026. Daftar obat, riwayat, dan foto referensi tersimpan di perangkat. Saat memindai, foto dikirim melalui Cloudflare ke Anthropic. Server kami tidak menyimpan foto label atau hasil obat.

Layanan menyimpan ID instalasi, saldo gratis dan berbayar, reservasi pindai, dan hash token pembelian. Token pembelian diverifikasi melalui Google Play. Simpan kode pemulihan di Pengaturan untuk mengakses saldo yang sama setelah instal ulang. Server hanya menyimpan hash kode; kode lokal dienkripsi. Rahasiakan file karena pemegang kode dapat mengakses saldo. Kami juga menyimpan hash SHA-256 Android ID khusus aplikasi untuk menghubungkan pengguna Android dan identitas penandatanganan yang sama ke saldo sebelumnya setelah instal ulang biasa. Android ID asli tidak dikirim; hash tidak digunakan untuk iklan. Reset pabrik, pengguna Android lain, atau identitas penandatanganan berbeda dapat mengubah ID. Simpan kode pemulihan untuk pergantian perangkat. Pengembalian dana Google diperiksa setiap enam jam untuk mencabut kredit yang belum digunakan. Menghapus aplikasi tidak menghapus buku besar server.

Pengingat dijadwalkan di perangkat dan mengikuti izin notifikasi ponsel. Mengetuk pengingat melewati PIN tambahan Ontimo; kunci layar ponsel tetap berlaku. Tidak ada akun pengguna atau pelacak iklan. Kami tidak menjual data. Hubungi joannesun.dev@gmail.com untuk pertanyaan data.