Your health stays with you.

What Listavita collects

Nothing. This is the unusual part of the policy, so it is worth being exact about what it means: Listavita has no servers that receive your information, no account system to attach it to, and no analytics, crash-reporting, or advertising code compiled into the app. There is no step at which your medications, doses, patients, photos, or use of the app are transmitted anywhere.

This is not a promise about how carefully we handle your data. It is a statement that there is nothing on our side to handle.

No account, ever

There is no sign-up, no login, and no account of any kind. You open the app and start using it. No username, email address, or password is tied to your health information, because there is no account system for one to belong to. We do not know who you are, and we have no way to find out.

Where your information is stored

On your phone, encrypted, using established and widely reviewed encryption. The key that unlocks it is generated on your device and held in your phone's own secure hardware storage — the Keychain on iPhone, the Keystore on Android. It cannot be copied off the device, by us or by you.

There is no cloud medical database. Not one we keep private, not one we encrypt carefully — there is not one at all. We deliberately do not publish the finer implementation details of the encryption on a public page: not because they are secret, but because a specification of exactly how a lock is built benefits an attacker more than it benefits you.

Photos you attach

You can attach a photo of a medication, its packaging, or a prescription to its record. Those photos are stored encrypted on your phone alongside everything else, and are never uploaded.

Two details worth knowing. Location and camera metadata are stripped from a photo before it is saved, so a picture of a prescription does not quietly carry the address of the place you took it. And Listavita never writes to your phone's own photo library — it only reads the image you choose, which is why it does not ask for permission to add photos.

Reminders stay on your phone

Reminders are scheduled and delivered locally, by your phone's own operating system. Nothing is routed through a notification server, which also means no server ever learns that you take a medication at eight in the morning.

The text of a reminder is deliberately minimal — enough to tell you something needs your attention, and never the name of a medication or its dose. A notification arrives on a lock screen that anyone nearby can read, so it says who it is for and nothing more.

Permissions the app asks for

The app asks for three permissions, each only at the moment it is first needed:

• Notifications, to deliver medication reminders. Decline, and every other part of the app still works — you simply will not be reminded.
• Camera, only if you choose to photograph a medication or a prescription.
• Photo library, only if you choose to attach a picture you already have. Listavita reads the one image you pick; it never browses your library and never writes to it.

The app does not ask for your location, contacts, microphone, calendar, or health records, and it has no code that could use them. Refusing any permission leaves the rest of the app fully usable.

It works offline

Every feature — adding a medication, receiving a reminder, marking a dose taken, reviewing history — works with no internet connection, because none of it depends on a server. You can leave the phone in airplane mode permanently and lose nothing.

Encrypted backup

Backup is optional and never runs unless you ask for it. It does not change the fact that Listavita requires no account and operates no servers: a backup goes to storage youalready own — your phone, Files, iCloud Drive, Google Drive, wherever you choose.

The backup is encrypted on your phone before any part of it is written anywhere. Whatever you save it to receives only encrypted data, and neither the file's name nor anything readable inside it says who it is about.

It is opened by a recovery key the app generates and you keep — not a password you choose, because a password reused from another account, sitting in the same cloud as the backup, is exactly the problem the encryption is there to prevent.

• If you lose the recovery key, the backup is permanently unreadable. By you, by us, and by anyone. There is no account, no reset, and no support process that can open it — for the same reason nobody else can read it either. You can view your key again at any time from a phone that still has Listavita working, so the situation to avoid is losing the keyand the phone.
• A backup only holds what existed when you made it. Anything recorded since is not in it.
• Once you hand a backup file to another app or service, that service's own privacy policy governs the file from that point on. It receives only encrypted data and cannot read it — but where the file then travels is between you and them.
• If you save a backup to a cloud service, we can tell you the file was written and handed over; we cannot tell whether that service finished uploading it. Check it in that service's own app. Listavita can also check a backup file and tell you whether it is complete and readable, without restoring it.

We do not describe backups as making your data safe, permanent, or recoverable. A backup is a copy you made, kept where you chose, openable only with a key you hold.

Realistic limits — not a guarantee

Local-first storage has real costs, and we would rather state them than make a claim we cannot stand behind:

• If your phone is lost, damaged beyond recovery, reset, or wiped and you have not made a Listavita backup, the data on it is gone. We have no copy. There is no support process that changes this, because there is nothing on our side to restore from.
• Your data does not move to a new phone on its own. Even restoring the phone from its own backup will not bring it across, because the key that unlocks it never leaves the original device. Only a Listavita backup moves your data.
• Uninstalling the app deletes its data. Reinstalling does not bring it back.
• If someone knows your phone's passcode, they can open the app and read what is in it. Encryption protects information stored on the device; it does not protect what is on your screen.
• If your phone is jailbroken, rooted, or running malware, no app on it can fully protect its data — including this one.
• We will not tell you security is guaranteed, because nobody can honestly say that. Encryption at rest is one meaningful layer alongside your phone's own lock, not an absolute defence against every scenario.

We would rather tell you this plainly now than have it surprise you later.

Children and other people you care for

Listavita is designed to be used by an adult, including by an adult keeping track of medications for a child, a parent, or someone else in their care. It is not directed at children, and it is not meant to be used by a child on their own.

When you add someone else as a patient, that information is yours to enter and yours to keep — it stays on your phone under exactly the same protection as your own. We do not receive it, so we cannot knowingly or unknowingly collect information about a child: there is no collection happening at all. If you are recording information about another person, please make sure you are entitled to do so.

This website

This website is static pages. It sets no cookies, runs no analytics, embeds no advertising or social trackers, and loads no fonts or scripts from a third-party service — the one font it uses is served from this site itself. Nothing you do here is profiled or shared.

The company that hosts these pages will keep ordinary server logs, which typically include an IP address, the page requested, and a timestamp. That is a normal part of serving any website and is not something we use to identify or track you.

If you write to the support address, we receive your message and your email address, and we keep the exchange only for as long as it takes to help you.

Your rights over your information

Privacy law generally gives you the right to ask a company what it holds about you, to get a copy, to correct it, and to have it deleted. Those rights apply to us in an unusual way: we hold nothing, so there is nothing for us to look up, export, correct, or delete. A request would come back empty.

What you can do yourself, at any time, without asking anyone:

• See everything. It is all in the app; there is no hidden copy.
• Correct it. Any record can be edited, and a corrected dose keeps the original alongside it, so history stays honest.
• Export it. Make a backup, which is yours to keep and to move.
• Delete it. Delete a patient, a treatment, or a photo in the app, or delete the app to remove all of it. Any backups you made are separate copies in places you chose — you will need to delete those yourself, wherever you put them.

If multi-device sync is ever added

Everything above describes Listavita as it works right now. If multi-device sync is ever introduced, it will not quietly inherit today's privacy posture. It would arrive with its own separate controls, explained on their own terms, and this page would be updated to describe it plainly — not folded into today's promises as though nothing had changed.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. A change that meaningfully affects how your information is handled — anything that would make a statement above less true — will be announced in the app, not only here, because a policy nobody was told about is not really a policy.

Contact

Questions about privacy can go to [email protected], and a person reads every message. Because we hold none of your data, please do not send medical details or a backup file — we cannot look anything up on our side, and there is no reason for your information to reach us.