PharmaSNAP AI · Last updated 26 October 2026
PharmaSNAP AI is an app that reads medicines and health documents from a photograph and explains them, out loud, in your language. It is made by LORDLY PTY LTD in Australia.
This policy explains what the app collects, which companies receive it, what it does not keep, and how to get rid of it. It is written to be read, not to be survived.
The short version. The app needs an account. To answer you, it sends what you give it to companies outside Australia, including in the United States. Photographs you scan, a PDF of blood-test results you choose, the questions you ask, and the saved health details and cabinet medicines that bear on a question go to Anthropic, whose AI models read them and write the answer. What you say into the microphone, and the words of an answer that is read aloud, go to OpenAI. Microsoft Azure is the backup for that voice work and runs the live conversation mode where it is switched on. Video capture and video imports are no longer available in the current app. In earlier versions, a short video you chose to send went to Google, with its sound and question, only after you agreed to send that clip. A pharmacy stock search sends the medicine name and the names of nearby pharmacies. We do not save scanned photographs, videos or chosen files in our own storage unless you choose to keep a cabinet photo. These companies can hold what they receive for a time under their own rules, as explained below. We keep your account, your cabinet, your dose records, saved chat text and what you add to My health until you delete them. We do not sell personal information. Paid pharmacy placements are labelled as sponsored.
| What | Why | Kept? |
|---|---|---|
| Your email address | To sign you in. The app needs an account. You can use Sign in with Apple, where a private relay address is fine, or sign in with your own email address and a password | Yes, until you delete your account |
| A Sign in with Apple token, if you sign in with Apple | Only so that we can ask Apple to end the app's connection to your Apple Account when you delete your account | Yes, until you delete your account |
| An account identifier | To keep your cabinet and your health details yours and nobody else's | Yes, until you delete your account |
| Medicines you save to your cabinet, including whether you still take each one, when you started or stopped, and why you stopped | So the app can answer later questions about what you take, and does not treat a medicine you stopped as one you still take | Yes, until you remove them or delete your account |
| Doses you record | Your own diary of what you took and when | Yes, until you remove the medicine or delete your account |
| What you add to My health: allergies and reactions, conditions, symptoms, test results, notes, and readings such as blood pressure, blood glucose, weight, heart rate and temperature | So an answer can take your own health into account. You add these yourself, or the app offers to save something you told it and saves it only if you say yes | Yes, until you remove the entry or delete your account |
| A photograph you choose to save with a cabinet medicine | So your cabinet shows your box, not a stock photo | Only if you tick "keep this photo". It is deleted when you delete that medicine or your account |
| Photographs you scan, and a PDF file you choose | To read them and answer your questions about them | Not saved in our storage. See "What we do not keep" |
| In earlier versions: a short video you chose to send, with its sound | To describe what is seen and said in it, and answer your question about it | Not saved in our storage. See "What we do not keep" |
| Questions you type or say | To answer them and apply usage limits | The words and answers are saved privately in your chat history until you delete the chat or account. Usage counts and separate short-lived answer caches are also kept. See "Saved conversations" and "Answers we keep for a short time" |
| A note of each scan: what kind of thing it was, the medicine's register number or product code, the language, and when | To count your free reports | Yes, until you delete your account |
| Usage records. For each request: the time, which part of the service handled it, how long it took and what it cost us to run. For some answers, the general topic, such as warnings or pregnancy. For a stock check, a scrambled code for the product. For the live conversation mode, how long it was open | To apply your allowance and our spending limits, and to see what the service costs. They hold no question text | Yes, until you delete your account. After that the amounts alone are kept for 12 months with nothing that names you. See "Deleting everything" |
| Document readings you choose to save: original passages, document type, source details, dates where shown, language and a protected matching code | So you can use a saved reading alongside new documents and keep different people's documents separate. These readings are not added to the shared medicine library or used for stored-question meaning matching | Yes, against your account until you remove the reading or delete your account. Saved chats may also contain the passages used in them |
| Your app settings: language, country, and whether answers are read aloud automatically | So the app is set up the same way on your next phone | Yes, until you delete your account |
| Your location | To find pharmacies near you, when you ask for them | Not saved. See "What we do not keep" |
| Purchases: your account identifier and whether you have a subscription. Also a count of how many times your account has asked us to check your subscription in the current minute and the current hour | To know whether you have a subscription. The count stops one account using up the checks all customers share | Yes, handled by Apple and RevenueCat. The count is kept with your account until you delete it |
| An app problem you choose to report: category, optional message, account reference and the app details shown before sending | For PharmaSNAP support to investigate the app problem. It is not an AI question | Until account deletion, or scheduled cleanup twelve months after the ticket's latest update |
| A daily app-open count, only if you turn on optional activity sharing | To understand how many consenting accounts use the app. It includes your account and UTC day, not screens, medicines, questions, photos or location | The dashboard uses thirty UTC days; daily cleanup removes older days. Turning sharing off or deleting the account removes your own day records. Your sharing choice is kept until account deletion |
Questions, answers, their source references and the text read from a photograph or health document are saved privately with your account in Supabase so you can return to a conversation on another signed-in device. This can include sensitive health information. We do not save the raw photograph, video, PDF or microphone recording in chat history. Temporary media links and reading tokens are excluded. Old answers are a record of what was said then, not a fresh check of your health or medicine.
Open Saved chats from Home or a conversation to read, continue or delete a chat. Reading saved text does not call an AI model. A new follow-up question or newly generated speech can use your AI allowance. Only the relevant, bounded conversation context is sent with a follow-up; the full saved history is not sent automatically. After you accept the updated saved-chat permission, asking about a particular person, such as "my mother", can also use relevant user-written details from up to 12 recent saved chats on your own account. Only a bounded set of statements linked to that person is sent, with saved-chat dates. Saved answers, photographs and documents are not included by this feature. Different or unclear people are kept separate; the app asks which person if the link is unclear. Earlier symptoms, readings and medicines are historical reports, not current findings, and current corrections take precedence. This does not add another person's details to your Health record. Starting a new chat clears that conversation's context; it does not erase saved chats or saved Health details. Older apps and accounts without the updated permission do not use other chats. Deleting a chat stops its use for later questions. A question already sent cannot be taken back from an AI service. Chats stay until you delete them or delete your account. Storage is limited to 1,000 chats and 50 MB per account, with a 2 MB limit per chat; the app shows a save error rather than silently deleting old chats. Signing out hides them on that device; it does not delete them.
The app may also keep a copy of an answer on your phone, so that the same question asked again can be answered at once without a new AI request. This is only for general questions about a medicine (what it is, what it is for, how it works, its side effects, how to store it), asked in English and without a photograph, video or file. Anything about a dose, timing, your health, another medicine, ingredients or a decision is always asked again. A saved copy is used for up to 7 days and is removed the next time you open the app after that. The question itself is not stored with the answer. An answer shown from the phone says "Saved answer" with the day it was saved, on the screen and aloud, and Ask again under it deletes the saved copy and asks afresh. Reading a saved answer aloud uses the voice service like any other answer, unless the audio is already held. These copies are kept in the app's own storage on that phone under your account. The app does not send them anywhere, another account on the same phone is never shown them, they stay on the phone when you sign out, and they are removed from the phone when you delete your account on it.
When you photograph a medicine, a pharmacy label or a health document, the picture is sent to our server, which passes it to Anthropic to be read. We do not save the upload in our application storage. This does not mean every service provider deletes it immediately; provider retention is described below. The whole picture is sent, so a pharmacy label or a prescription goes with the name, the doctor and the pharmacy printed on it. The only photograph we store is one you deliberately save with a cabinet medicine. It is stored privately and is deleted when you delete that medicine or your account.
Video capture and video imports are no longer available in the current app. The following explains how earlier versions handled clips, and remains relevant to people using those versions.
You can record or choose a clip of up to 15 seconds and 6 MB and ask a question about it. Before the clip is sent, the app asks you to agree, and it asks again for every new clip. If you agree, the whole clip and its sound pass through our server to Google Gemini, outside Australia. The question you typed or said is sent to Google with it, as text. Your photographs, your files, your microphone recordings and your saved health details are not sent to Google.
Google sends back a short description of what is seen and said in the clip. That description and your question go to Anthropic, which writes the answer. The app holds the description for up to two hours, tied to your account, so a follow-up question does not send the clip again.
We switch off Gemini's interaction history for these requests, and we do not store the original video in our application storage or in chat history. The question and the written answer are saved in your chat history like any other. Google may keep data for a time under its own service and abuse-monitoring terms; this is not a promise of immediate deletion.
Video questions are included with PharmaSnap Plus or an active trial, within the AI allowance. They are not included in Free outside an active trial. See the terms for current processing credits and refresh periods. A video answer can miss things that happen quickly. It does not tell you which medicine a loose tablet is, it does not tell you what is wrong with you, and it does not tell you whether the way you use a medicine or a device is safe.
You can choose a supported PDF of up to six pages, including blood-test results, hospital letters, referrals or discharge summaries. Supported documents can also be photographed. The file or photo is sent to our server and on to Anthropic to be read, including any name, date of birth, Medicare number and other detail printed in it. We do not save the original PDF upload in our application storage. Photos are handled as described above, including a photo you choose to keep with a cabinet medicine. Provider retention is described below. An unsupported or unclear document is refused.
The app returns accepted original passages with source details and dates where shown. You can choose to save a reading in My health and use it alongside new documents. The saved reading is extracted text and source details, not the original file. Access through the app is limited to your account. A protected matching code made from a printed name and date of birth helps keep different people's documents separate; those two values are not kept as separate fields in the saved reading.
Temporary permission to reuse a reading lasts for two hours after it is returned. A follow-up can refresh that period. A saved chat may still show passages used in that conversation. Removing a saved reading does not erase those passages from an existing saved chat; delete that chat to remove its copy. Private readings and answers based on them are excluded from the shared medicine knowledge library, stored-question embeddings and shared speech storage. When AI is used to answer a question with a private reading, we may send its accepted text and your question to Anthropic. Private readings are health information linked to your account.
When you ask for a pharmacy near you, your location is sent to our server so we can work out which pharmacies are closest. It is used for that search only: it is not saved to your account, not tracked in the background, and not given to the pharmacies.
When you ask a question by voice, the recording is sent to OpenAI to be turned into text, so the question can be answered. We do not keep the recording in our application storage. When the app reads an answer back to you, the words of that answer are sent to OpenAI too, to be turned into speech. Both of those happen on OpenAI's services outside Australia, including the United States.
Medicine reminders are kept on your phone only: the times you chose, the alert style and the medicine's name. They are not sent to our server. Alerts stop while you are signed out, and the reminders are removed from the phone when you delete your account. A spoken reminder plays a recording that is already inside the app. It says "your medicine", not the medicine's name, and nothing is sent to anyone to make it or to play it. The alert on your screen shows the medicine's name unless you turn that off.
Microsoft Azure does two things. It is our backup for the same voice work: a version of the app can be switched over to it, and then the recording and the words of the answer go to Azure instead of OpenAI. And there is a live conversation mode, switched on for some accounts, in which your phone streams the sound from your microphone straight to Azure for as long as the conversation is open.
Before the app uses any of this it asks you to agree to it, and you can leave the voice features alone if you would rather not.
Provider retention is separate from our application storage. We do not store your recordings, and the voice companies may keep them for up to 30 days under their own policies. OpenAI documents no application-state retention for its transcription and speech endpoints, but speech requests can be retained for abuse monitoring for up to thirty days under its default policy. Special account controls can differ. We do not claim that our account has zero data retention. See OpenAI's API data controls.
When the shared knowledge feature is enabled, screened general medicine answers may be saved without account details to build PharmaSNAP's knowledge and improve future answers. This library excludes personal health information, personal questions, prescription directions and health documents. It is separate from the chats and health details kept privately in your account. Stored entries include the medicine, general question, language, sources and safety version, with no account identifier. Not every answer qualifies: it must pass the eligibility and answer screens. General library entries have no automatic expiry; they may be updated or removed when evidence or safety checks change.
When meaning matching is enabled, an eligible general medicine question may also be sent to OpenAI to calculate a numerical representation, called an embedding, to find relevant stored answers. No account identifier is included in that request. Personal questions are excluded from this feature. This builds the app's reference library; it is not a statement that your personal content is used to train an AI model. Photographs, files, recordings or question text sent for an answer can still contain names and other personal details you include, so we do not describe every AI request as anonymous.
These are the companies and public services the app sends information to, and what each one receives. They process it on our behalf under their own service terms and settings. Our choice not to store an upload is not a promise of immediate deletion by them.
| Who | What they receive | Why |
|---|---|---|
| Google, outside Australia. Our server calls its Gemini AI model | A short video you choose to send, with its sound, and the text of the question you asked about it. Only for a video question, and only after you agree to send that clip. Photographs, PDF files, microphone recordings and saved health details are not sent to Google | To describe what is seen and said in the clip. Gemini's interaction history is switched off for these requests |
| Anthropic, in the United States. Our server calls its Claude AI models | The photographs you scan and the PDF files you choose, with everything printed on them. The questions you type, the text of the questions you say, and what was said earlier in the same conversation. After the updated saved-chat permission, relevant user-written statements from recent saved chats about the particular person you ask about, with saved-chat dates. The saved health details and cabinet medicines that bear on your question. For a pharmacy stock search, the medicine name and the names and suburbs of nearby pharmacies | To read what you sent, write the answer, and search the web when a question or a stock check needs it |
| OpenAI, in the United States | The recording, when you ask a question by voice. The words of an answer, when the app reads it aloud. An eligible general medicine question, without an account identifier, when meaning matching is enabled | To turn your speech into text, the answer into speech, and an eligible general question into an embedding for stored-answer matching |
| Microsoft Azure | The same recordings and answer words, but only in a version of the app that has been switched to our backup voice service. In the live conversation mode, where it is switched on for an account, the sound from your microphone, streamed from your phone for as long as the conversation is open | Backup speech, and the live conversation mode |
| Supabase, which hosts our server, database and sign-in | Your email address and account identifier, and your password if you sign in by email. Your cabinet, dose records, My health entries, saved chat text and source references, kept photographs, settings and usage records. App support tickets, optional daily app-open counts and the sharing choices described below. Your location passes through for a nearby-pharmacy search and is not saved. Photographs, files, questions, recordings and a short video you choose to send pass through this server on their way to Anthropic, OpenAI and Google, and to Microsoft Azure where the backup voice service is switched on. Supabase also sends the account confirmation and password-reset emails, itself or through an email delivery service | To run the app and keep your account |
| Apple | Your sign-in, if you use Sign in with Apple. Your subscription purchase and payment | To sign you in and take payment. We never see your card |
| RevenueCat | Your account identifier and your purchase status | To tell our server whether your subscription is active |
| Public medicine registers: openFDA and RxNav in the United States, and the TGA in Australia | A medicine identifier only, such as an ingredient name, a product code or a register number. Nothing about you is sent. Most of these lookups are made by our server. When you scan a barcode, your phone asks openFDA about that product code itself. A source link you tap, such as a TGA leaflet page, opens that website from your own phone like any other web link | To fetch the official documents an answer is built from |
| Australian pharmacy chains' public websites | The medicine being checked and which of their branches to look at. Nothing about you | To read what their own site lists, for a stock check |
Most of what you send us is handled outside Australia, and you should know which parts before you send it.
Their processing locations depend on the service and account settings. We cannot promise that any of this information stays in Australia, or that every provider processes it only in the United States. The app asks you to agree before it sends a photograph, a file, a question or a recording to these companies. It asks again, separately, before each new video is sent to Google.
You can take that permission back at any time, in the app: Profile → AI permission → Withdraw this permission. The app then goes back to the screen where you first agreed, and it cannot read a photo or answer a question until you allow it again. Your account and everything saved in it are kept. Taking the permission back does not delete what these companies have already received.
Two different things happen here, and only one of them touches the open web.
Finding the pharmacies near you is a lookup in our own directory, using the location you just gave us.
Asking whether a medicine is stocked nearby is a web search, where that check is switched on. To run it we send the name of the medicine, together with the names, suburbs and postcodes of the pharmacies nearest you, to two kinds of place: the big chains' own public websites, which we read directly, and Anthropic, whose AI model runs a web search for us. The chains are Australian; Anthropic is in the United States. We do not send your name, your email address, your exact location, your saved health details or the list of medicines in your cabinet. The pharmacies are not told that you asked.
A page on a website is not a shelf. What the app shows you is what a page said and when it said it, with a link, so you can ring the pharmacy and hear it from a person.
What a page said is kept, with no account attached: the pharmacy, the medicine, what the page said, the link and the time. For 24 hours it is used in place of a new check, so the same check is not run twice, and after that it is marked as older information. It is not private to the person who asked. Where stock checks are switched on for everyone, the app reads it back, for up to 90 days, for anyone signed in who looks up the same medicine near that pharmacy, with the time rounded to the hour. These records are not deleted after a set time, and deleting your account does not remove them, because nothing in them says who asked.
A pharmacy can pay for a labelled slot in the nearby list. It is marked as sponsored, it never changes the real distances or the order of the others, and we record that the slot was shown or tapped, with the distance and the time, so the sponsor can be billed for what was delivered. That record holds nothing about you, and nothing about you is sent to that pharmacy.
When the app shows a sponsor's logo, or a product picture from a pharmacy chain's website, your phone loads that picture from the website it is kept on, the way a web browser would.
What medicines you take, and anything you add to My health, is health information about you, and Australian law treats it as sensitive. We treat it that way too. It is stored against your account, and access through the app is limited to your account. Service providers process information as described in this policy. We do not sell health information or send it to pharmacies for marketing.
When you ask a question, the app looks through your saved health details and picks out the ones that bear on that question, for example a penicillin allergy when you ask about an antibiotic. When the question is about taking one of your own medicines, it can also include the other medicines you take, because that kind of question has to be looked at against all of them. What it picks is sent with your question to Anthropic, whose AI model writes the answer. The app does not save its own conclusions about your health as facts about you: only what you added, or agreed to save.
You can see or remove anything in My health from inside the app. Entries with an edit option can also be changed.
When the app writes an answer it can keep it, so the same question does not have to be worked out twice.
These caches are separate from saved chat history. A question is converted to a code for cache lookup; saved chats separately retain the readable question and answer until you delete them. Reports built only from a medicine's public documents, and the spoken audio of sentences read from those documents, are also kept with no account attached, because they say nothing about anybody.
There are no advertising identifiers, no analytics SDKs and no tracking of you across other apps or websites. Nothing in this app is sold to a data broker. A sponsored pharmacy slot is the one paid placement in the app, it is labelled as one, and it is described above.
When you choose Report an app problem, the form shows the app details that will be sent. Your selected category, optional message and account reference go to PharmaSNAP support only after you allow this and press send. Authorised support can read the private message to investigate the problem. Do not include names, health details or passwords. Photos, documents, recordings, answers and health-screen contents are not attached automatically. Support messages are not sent to AI to answer questions or added to the shared medicine library.
Support messages and their app details are deleted with your account, or by scheduled cleanup twelve months after the ticket's latest update. Security audit records of owner access and support actions are kept for twelve months after the event. These can include an owner account reference, ticket reference, state changes and the owner's reason. They can remain after an account or ticket is deleted. The message body is not copied automatically into the audit.
Daily app-open sharing is optional and off by default. Turning it on lets the app count your account once per UTC day when you open it. This does not include screens, medicines, questions, photos or location. The dashboard shows thirty UTC days and a daily cleanup removes older days. Turning sharing off removes your earlier shared days; account deletion removes the choice and day records. The choice and its date are otherwise kept so the app remembers your preference.
Authorised owner tools also show aggregate sign-ups, sign-ins, service costs and operational problem counts. Sign-in counts are separate from optional app-open counts. General problem counts do not contain your question, answer or health documents. App support and optional activity do not use AI credits.
You can delete your account from inside the app: Profile → Delete my account. That permanently removes your sign-in, your cabinet, your dose records, everything in My health, the photographs you kept, private saved document readings, saved chats, your settings, your usage records and any answer cached against your account. You can also remove a single medicine or a single My health entry at any time, and removing a medicine deletes its dose records and any photograph you kept with it.
You do not have to give the AI permission to delete your account. If you have not given it, or you took it back, choose I do not allow this on the screen that asks for it. While you are signed in, the page that opens has Delete my account, Sign out and Manage subscription.
Deleting your account does not cancel a subscription. Apple takes the payment, so only you can cancel it, in your Apple account settings: Settings, your name, Subscriptions. Cancel first, or Apple keeps charging you. When the account is deleted the app asks RevenueCat to delete its record of you, and if you used Sign in with Apple it asks Apple to end the app's connection to your Apple Account. If either request does not go through, the deletion still happens, and you can remove the app yourself in your Apple account settings under Sign in with Apple. Apple keeps its own record of a purchase.
Some things are not removed, because they are not tied to you: an answer, a report or spoken audio kept with no account attached, what a pharmacy's web page said in a stock check, the count of times a sponsored slot was shown, and our log of purchase events, which is kept for 90 days with your account identifier taken off it. What a service provider already holds is deleted under that provider's own rules.
Separately from the support audit records described above, two allowance records are kept for 12 months after you delete your account, and then deleted. They are there so that deleting an account and making it again does not give out the free allowance twice, and so the spending limits all customers share stay correct. Neither holds your email address, your account identifier, a question, an answer or anything about your health.
If you sign up again with the same sign-in inside those 12 months, your free allowance carries on from where it was. It does not start again.
If you would rather we did it, email privacy@lordly.com.au.
Under the Australian Privacy Act 1988 and the Australian Privacy Principles you can ask what we hold about you, ask us to correct it, and complain if you think we have mishandled it. Write to privacy@lordly.com.au. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
PharmaSNAP AI is not intended for children. We do not knowingly collect information from anyone under 16.
If this policy changes in a way that matters, the app will ask you to read it again before you carry on using it.