Medsie — Privacy Policy
Last updated: 27 October 2026
Medsie (called İlacım in Turkish) is a medication reminder for iPhone made by Smart Maple. This policy explains what the app processes, why, where it is stored, who can see it and how to delete it.
In short
- Your medicines and dose records are kept on your phone first. The app works without an account.
- Data goes to our servers in the European Union (Frankfurt, Germany) only if you turn on cloud backup and family sharing with your explicit consent.
- Only the relatives you link can see your medicine information.
- No ads, no tracking, no selling of data. The app contains no advertising or analytics SDKs.
- You can withdraw consent and delete your account and data inside the app.
1. Who we are and what this policy covers
Data controller: Smart Maple Yazılım Teknoloji Limited Şirketi, Erler Mahallesi, Bağlıca Bulvarı No: 4/7, Etimesgut, Ankara, Türkiye. Email: support@smaple.tr.
This policy covers the Medsie / İlacım iOS app and its backend services. It is provided under Turkish data protection law (KVKK, Law No. 6698) and also describes your rights under the GDPR where it applies.
2. Information the app handles
Medicines and dose records (health data)
Medicine name, strength, form, times, doses taken or skipped, stock and expiry dates. This is health data (a special category of personal data).
Reminder settings
When you are reminded again if a dose is late, whether the server sends you an extra reminder, and when your relatives are told.
Account details
Your name. Your email address if you sign in with email to follow a relative or restore your account. Your phone's notification token so we can send notifications. If you chose a relative's voice as your reminder sound, the name of that sound file is stored with the notification token.
Last connection time
When your phone last connected to the server. If your phone has not connected for a long time, this lets your relatives know the information may be incomplete.
Camera, microphone and contacts
- The camera is used only to read the code on a medicine box (Karekod) and a relative's invite QR code. No photos are taken or stored.
- The microphone is used only when a relative records a voice reminder.
- Contacts are opened only to pick a relative's phone number; only the number you pick is used, and it stays on your phone.
3. Setup through a relative's invite
A relative (for example your son or daughter) can start setting up the app for you from their own phone by typing your name and how you are related (mother, father, spouse or other). This is stored on the server for the invite.
The invite link or QR code carries a secret key that cannot be guessed and your relative's name. The secret key is never sent to the server. An invite is valid for 24 hours and works once.
Only you give consent, on your own phone. Nothing leaves your phone for the server before you consent. You also choose whether your relative may edit your medicines, and you can turn this off at any time.
When you accept the invite, your phone's model (for example "iPhone 15") is shown to the relative who invited you, so they can see the right phone is connected.
Medicines your relative adds for you in advance stay on their phone until you accept the invite and they confirm the connected phone.
4. Voice reminders
A relative with permission to edit can record a voice of up to 25 seconds and send it to you. The recording is the personal data of the relative who recorded it. It is used only as your reminder sound (for medicine reminders and when your relative rings your phone) and never for voice recognition or identification. Only you and the relative who recorded it can listen to it.
You decide whether to use it. A recording you decline or stop using is deleted after 7 days. A recording you haven't decided on is kept until your relative sends a new one, the link is removed or an account is deleted. Deleted audio files are removed by a server cleanup that runs every 30 minutes; outages can delay this. To stop an old request recreating deleted audio, a one-way SHA-256 digest of the file path and its retirement time are kept; this record contains no audio.
5. Information kept only on your phone
- A relative's phone number (for the "Call" button) is stored only on the phone of the person who saved it.
- Draft medicines and invite details from a setup stay on the relative's phone until the setup is finished or cancelled.
- Data on your phone may be included in your phone's own iCloud backup. The installed reminder voice is excluded from backups.
6. Purposes and legal grounds
We process your data to remind you of your medicines, track stock and expiry dates, send you one more reminder if you do not mark a dose, and let the relatives you allow see your medicines, be told when a dose is missed or taken late, ring your phone and send you a voice reminder.
Health data is processed with your explicit consent (KVKK art. 6; GDPR art. 9(2)(a)). Storing it on servers abroad for backup and family sharing requires your separate explicit consent (KVKK art. 9). Your notification token, reminder settings and last connection time are sent to the server only when cloud sharing is on.
7. Service providers, sharing and international processing
- Supabase Inc. hosts our database, sign-in and file storage on servers in the European Union (Frankfurt, Germany). Connections are encrypted.
- Expo (650 Industries, Inc., USA), Apple and Google deliver notifications sent by our server. Reminders your phone schedules itself do not use this route.
- Resend, Inc. (USA) delivers the one-time sign-in codes we email to you. Only your email address and the code are sent.
Notifications contain people's names. "Missed dose" and "Running low" notifications to your relatives also contain medicine names. Reminders and rings the server sends you, and the "took the medicines" notification to relatives, contain no medicine names.
We do not sell your data and do not share it with advertisers or data brokers.
8. Advertising and tracking
Medsie shows no ads, does not track you across apps or websites, and contains no third-party advertising or analytics SDKs.
9. Children's privacy
Medsie is intended for adults managing their own medicines or a relative's. It is not directed at children, and we do not knowingly collect children's personal data.
10. Retention and deletion
- Data is kept while your account exists. Deleting your account (Settings › Privacy) removes your app profile, medicines, dose records and family links.
- Dose history on the phone is cleaned up after 120 days.
- Your shared sign-in identity may be used by other Smart Maple apps and is kept. To stop an old phone re-uploading deleted data, your account ID and deletion time are kept while that sign-in identity exists.
- Invite details are deleted at most 8 days after the invite is created.
- Records of server reminders and missed-dose alerts are deleted after 14 days; records of rings after 2 days.
- The notification token is deleted when you turn off cloud sharing, delete your account or sign out.
11. Your privacy rights
Under KVKK art. 11 (and the GDPR where it applies) you can ask whether your data is processed, get a copy, have it corrected or deleted, object, and withdraw your consent at any time. Withdraw consent in Settings › Privacy; delete your account and data from inside the app. For any other request, email support@smaple.tr. You can also complain to the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority.
12. Medical notice
Medsie does not give medical advice and does not replace your doctor or pharmacist. Always follow your doctor's instructions.
13. Changes and contact
We will update this page when the app's data practices change and, where required, ask for your consent again in the app.
Smart Maple Yazılım Teknoloji Limited Şirketi · Erler Mh. Bağlıca Blv. No: 4/7, Etimesgut, Ankara, Türkiye · support@smaple.tr