Your data stays yours.
What PharmBit collects to run your study, what it never does with it, and how to take it back.
Effective date: 11 September 2026.
What we collect
Your email when you sign up, your study progress as you use the app, and basic analytics (page views, button taps) so we know what is broken.
How we use your information
We use your email to create and secure your account and to send service messages such as password resets and receipts. We use your study progress to run the product you signed up for: scheduling review, tracking streaks, surfacing weak areas and syncing across your devices. We use analytics to understand which parts of the app are used and which are broken, so we can fix them. We do not use any of it to profile you for advertising.
What we never do
We never sell your data. We never share it with advertisers. We never track you across other apps. Analytics stay inside PharmBit and serve product decisions only.
Lawful basis and retention
Account and progress data is processed to perform the service you signed up for. Analytics is processed under legitimate interest in a working product. Account data is kept while your account is active; deletion requests erase it within 30 days subject to store billing records we cannot control.
Your rights
Access, correction, deletion, portability and objection apply to your data. Contact hello@pharmbit.app and we respond within 30 days.
Children
PharmBit serves post-secondary health students. Accounts for under-16s require guardian consent per local law.
Cookies
The website uses strictly necessary cookies for core function plus privacy-respecting analytics. The app uses no advertising cookies and no cross-app trackers. Cookie preferences can be changed in your browser at any time.
Service providers we use
We use a small number of third-party providers to run the service: cloud hosting and database providers that store your account and study progress, a transactional email provider that sends account and service messages, and the App Store and Google Play for payments under their own terms. Each provider is bound by contract, handles only the data its function requires, and may not use your data for its own purposes or marketing. We can confirm the specific providers on request at hello@pharmbit.app.
How we protect your data
Data is encrypted in transit and at rest. Access is limited to the people who need it to run the service and is protected by individual accounts rather than shared logins. Providers are chosen for their security posture and bound by contract. No system is perfectly secure, so we do not claim otherwise, and if a breach affects you we will tell you as described below.
Deleting your account
You can delete your account and its data at any time from inside the app, or by emailing us. Our account deletion page explains both routes, exactly what is removed, and what the app stores retain that we cannot control.
International transfers
Processors may store data outside your country. Transfers use standard contractual safeguards, and data is never sold or shared with advertisers in any jurisdiction.
Breach notification
Qualifying personal data breaches are notified to the relevant regulator within 72 hours and to affected users without undue delay, with the nature, likely consequences and mitigation steps described.
How long we keep data
Accounts and progress: while active, erased within 30 days of deletion request. Support correspondence: 12 months. Analytics: aggregated after 14 months. Store billing records follow App Store and Google Play retention, which we cannot control.
Complaints
Complain to us first at hello@pharmbit.app. You also have the right to complain to your data protection regulator, including the UK ICO or your national authority.
Changes to this policy
We update this policy when what we do with your data changes. The effective date at the top always reflects the current version. Material changes are announced in-app and by email to registered users at least 14 days before they take effect, so you have time to object or close your account. Continuing to use PharmBit after a change takes effect means the updated policy applies to you.
Who controls your data
PharmBit is the data controller for the information described on this page, which means we decide why and how it is processed. Reach the controller at hello@pharmbit.app for any request under this policy, including access, correction, deletion or objection.
Contact
Data questions: hello@pharmbit.app. See also our terms of use and medical disclaimer.