Your records stay where you put them.

Who is behind Simpastil

Simpastil is a free, open-source project made by one person. Questions about this policy go to simpastil@protonmail.com.

What the app keeps on your phone

Everything you enter (people, medicines, routines, doses and notes) is stored on your device, in an encrypted database (SQLite3 Multiple Ciphers, ChaCha20) whose key lives in the Android Keystore.

• The database is left out of Android cloud backup and device-to-device transfer.
• Portable backups are made only when you ask for one, and are sealed with a password you choose (Argon2id and AES-256-GCM).
• PDF and CSV reports are made only when you export them, and are kept apart from backups.
• An optional app lock asks for your phone's screen lock or biometrics before Simpastil opens.
• You choose whether reminders show medicine names on the lock screen and in the widget.

When the app goes online

Update check

At most once a day, the app asks GitHub for the latest release. That request carries your IP address and nothing about you. You can switch it off in Settings, under About. If you sync with your own server, the server asks GitHub instead and your phone does not contact GitHub.

Sync with your own server (optional)

If you connect a Simpastil server that you run, your records travel between your devices and that server over HTTPS with TLS 1.3. The server keeps each account apart with PostgreSQL row-level security, and every client presents an API key that can be revoked. We have no access to your server or what is on it.

Problem reports

A problem report is made only when you press Report a problem, and only after you have seen exactly what it holds. It contains no names, medicines, doses, notes, server address, account or sign-in details; sizes are ranges and times are rough on purpose. You then choose where it goes: Submit issue on GitHub opens a prefilled form under your own GitHub account, and Share another way lets you email it or pass it to another app.

Downloads

The app is downloaded from GitHub releases, directly or through Obtainium. GitHub's own privacy statement applies to those downloads and to anything you post on GitHub.

What the app asks Android for

Notifications

To remind you. Asked only when you set reminders up.

Alarms and reminders

So a reminder arrives on time, not whenever the phone gets round to it.

Start after a restart

To put reminders back after the phone reboots.

Battery exception

Optional, and skippable. Offered only when Android holds Simpastil back.

Internet

For your server, if you connect one, and the update check.

This website

• No cookies, no analytics and no requests to other companies. The fonts and code are served from simpastil.com itself.
• Your theme and Reduce motion choices are kept in your browser's local storage, so the site remembers them. They are never sent anywhere.
• The site is hosted on Cloudflare Pages. Like any web host, Cloudflare handles technical data such as your IP address to deliver the pages and protect the site from abuse; see Cloudflare's privacy policy.
• Links to GitHub and Ko-fi take you to those sites, and their own policies apply there.

Your control

Uninstalling the app, or clearing its data in Android settings, removes your records from that phone. Backups you made and reports you exported stay wherever you saved them, and records on your own server stay under your control. Because we hold no data about you, there is nothing for us to hand over or delete; if you have a question, write to us.

Not medical advice

Simpastil keeps records and shows them back clearly. Decisions about medication stay with you and the people who prescribe it.

Changes to this policy

If this policy changes, the new version appears on this page with a new date.