Privacy Notice
Last updated: August 2026
1. Data controller
Timalia is responsible for processing the personal data collected through the App. If you want to exercise your rights of access, rectification, cancellation, or objection, you can contact us through the channels made available in the App.
2. Data we collect
Timalia collects the following data: the information from your Google account needed for authentication (name, email, and identifier); the profile data you enter during setup (date of birth, weight, height, and role); and the medications, schedules, notes, and intake history you register in the App.
3. Data stored locally
The App works offline-first: your medications, schedules, and intake history are stored primarily on your device. You decide whether you want to sync this data with the server to enable online features.
4. Data sent to the server
When you sign in and enable sync, your medications, schedules, and intake history are sent to the server so they can be restored on other devices and to enable caregiver connections. Your device token is also registered to deliver push notifications.
5. Caregiver connections
When you connect a caregiver, you authorize them to view your medications, intake history, and reports related to that connection. A caregiver can only manage remotely the medications that you allow. You can revoke the connection and associated access at any time.
6. Notifications
The App sends local reminders from your device for the medications you configure. Alerts intended for caregivers use push notifications through Firebase Cloud Messaging, which involves processing your device token exclusively to deliver notifications.
7. Purposes of processing
Your data is used to: enable the operation of the App and its reminders; support sync across devices; allow caregiver connections and monitoring; generate adherence reports; and improve the stability and performance of the service.
8. Data retention
Your local data remains on your device until you delete it or stop using the App. Data synced with the server is kept while your account remains active. When you sign out, local data is removed; you can request deletion of server-side data by contacting us.
9. Sharing with third parties
We do not share your personal data with third parties for commercial purposes. Information is only shared with caregivers you authorize through the connection feature. We use infrastructure providers, such as Google for authentication and Firebase for notifications, which may process data required to provide the service under their own policies.
10. Security
We apply reasonable technical and organizational measures to protect your data, including token-based authentication and encryption in transit and at rest. However, no transmission or storage method is completely secure, and we cannot guarantee absolute security of the information.
11. User rights
You have the right to access, correct, or delete your personal data, as well as object to or restrict its processing. You can exercise these rights by signing out of the App, deleting your local data, or contacting us to delete data stored on the server.
12. Minors
Timalia is not intended for minors without the consent of their parents or guardians. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us so we can delete it.
13. Changes to this notice
We may update this Privacy Notice at any time. Changes become effective when published on this page. We recommend reviewing this document periodically.