Privacy Policy

Last updated: 13 November 2026. TIKK is a medicine reminder, made and run by Anil Kariwala (Kariwala Industries), who decides how the information in TIKK is used (in data-protection law: the controller, or in India's DPDP Act the data fiduciary). This explains in plain words what TIKK keeps, why, where, who can see it, how long it is kept and what you can do about it. Contact: tikk@kariwala.com. TIKK is meant for adults and the people who look after them; it is not directed at children.

What TIKK stores, and why

• Health information in a chart, to remind you, to show what was taken, and to let the carers you choose help: medicine names, doses, times and days, notes and instructions, when each dose was ticked, or skipped on purpose, and whether the patient or a carer did it, stock counts, doctors' names, specialties and visit dates (including the next review date written on a prescription), a record of each prescription or visit (the list of medicine names on it, how many pages it had, which medicines continued and what it changed, for example "every 5 days instead of Tuesday and Friday", and a short plain summary of the prescription written by the AI), a visit you record when you tell TIKK that a doctor asked for a change you made by hand, a record of every change to a medicine (what changed, the name of the person who changed it, a word for the kind of device, such as iPhone, and when) and of every request to stop or remove one and its answer, kept for one year, vitals you record (blood pressure, sugar, weight, pulse and others, each with the short note you may write beside it), and routines such as yoga.
• The person's name, date of birth and gender. They are entered in Settings, Patient details (or once, when the first doctor report is made) and stored on the chart, so that a carer sees the same details and so that they can be printed at the top of the doctor report: the name (a report cannot be made without it), the age (worked out from the date of birth, so that it stays right as years pass) and the gender. The date of birth and the gender are optional, and if you do not know the exact date you can give only the year; they are stored only if you give them and printed on a report only then. They are deleted with the chart when you use Delete my account and data. You can choose to keep the name private (Settings, Recovery): then the server stores no name, a carer sees "Private patient", and the name stays on the phones only (a carer who makes a report types it on their own phone). A report is a PDF made on your phone; TIKK keeps no copy of it, and where it goes after that (a chat, an email, a printer) is up to you.
• Your identity. TIKK gives every phone an anonymous identity (a random number) automatically. If you sign in with Google, your Google name, email address and profile-picture link are stored too (the name and email are used so a carer can be emailed; the picture is not shown). For every sign-in session the sign-in service also keeps the time, the IP address and the type of phone or browser it came from; this is how it keeps sessions safe.
• Carers. Your share code and, for each carer you share with: their name and email address, how often they want missed-dose emails, and when they were linked.
• Recovery details (optional): only a scrambled (hashed) version of first name + year of birth + last 4 phone digits is stored, so a lost chart can be restored. The details themselves are never stored.
• Reminders. If you switch notifications on: your browser's notification address (a push subscription), so reminders can reach your phone, and a record of each reminder sent and whether it arrived.
• Preferences and clock: your language and text size; the time zone of your phone (for example "Europe/London"), kept with each chart you own so that reminders and emails arrive at the right local time wherever you are; and, for someone who looks after a person, the time zone and whether their phone shows a 24-hour clock, so the emails to them are written their way. It is a time zone, not a location, and it is only ever read from the phone itself.
• Counters that keep the service fair and safe: how many prescription scans you made today, and recent attempts to join a chart or to recover one. Usage days per chart: TIKK gives every chart free days and counts them, so for each chart it records the dates (in the chart's own time zone) on which the chart was used by the patient or a carer, for example to tick a dose, scan, make a report or write a reading; days when nobody used it, and a carer only looking at the chart, are not counted. Nothing is blocked when the days run out. A tap on a "Coming soon" tile is recorded with the chart and the date, so we can see how many people want the feature. Invitations: if you use "Refer TIKK", TIKK keeps your invitation code, how many times you tapped Invite or Copy link, and which new accounts started with your code (the code and the dates, no names), so that the extra free days can be given; a random id that your phone keeps is used only to refuse an invitation to the same phone.
• Where you came from. The first time TIKK is opened, it notes what the web address carried: the click code of a Google ad (gclid), the words that say which page or campaign sent you (utm_source, utm_medium, utm_campaign), and the invitation code if you came from a friend's link, with the address of the page you landed on and the time. It is saved once, on your anonymous identity, so that we can count how many people who came from a Google ad, our website or an invitation went on to use TIKK. It holds no name or email, it is never used to follow you around or to show you advertising, and it is deleted with your account. A visit that carried none of these is recorded as direct.
• Anonymous scan statistics and translations, described below.

What stays on your phone

Photos and PDFs of prescriptions stay on your phone: every page of a prescription you save, and the photo you may add when you tell TIKK a doctor changed a medicine. They are never uploaded to TIKK's database. The phone also keeps its own copy of your chart, so TIKK works without a connection.

The prescription scan

A prescription can have up to 6 pages. You add the pages first, and nothing is sent until you tap "Read prescription". Then all the pages (photos or a PDF) are sent together, in one request, through TIKK's server to an artificial-intelligence service (Anthropic) so they can be read as one prescription, and the result comes back to you. TIKK does not keep the images or the text read from them; only what you confirm is saved to your chart. That includes a short plain summary of the prescription that the AI writes in the same request: it is shown under the prescription, labelled as an AI summary to be checked against the paper, and is deleted with the chart. TIKK compares what the prescription says with the medicines already on the chart, on your phone (or, for a carer, on theirs), to show you what changed; nothing on the chart is changed or stopped unless you confirm it. The AI provider processes the pages under its own terms.

Anonymous scan statistics

When you confirm a scan, TIKK records the medicine brand, generic name and strength together with the doctor's name, specialty, city and date. They are tied only to your random identity number, not to your name, and they do not include your doses or your ticks. This helps TIKK understand which medicines are prescribed. They are deleted with your account.

Translating instructions into Hindi

If you use TIKK in Hindi, short pieces of text such as a medicine instruction ("Empty stomach") or a remedy's name are sent through TIKK's server to the same AI service to be translated. The translation is kept in a shared store so that the same sentence is never translated twice; the entry notes the random identity number of the person who first needed it, and is deleted with that person's account.

Reminders and emails

A reminder reaches your phone through your browser's push service (Google, Apple or Mozilla, depending on the phone); it contains the names of the medicines due. If a carer chooses missed-dose emails, TIKK sends them through Resend to the carer's email address; an email names the person and the medicines and times not ticked.

Feedback

If you use the Feedback button, what you write goes to Anil Kariwala through the feedback form at feedback.kariwala.com; if you are signed in with Google and have not chosen to keep your name private, your Google name and email address are sent with it, and otherwise it is sent anonymously.

Who can see your information

You, and the carers you share with: a carer sees the whole chart, can tick doses and can add or change medicines. The people who operate TIKK can reach the database to run and support the service. We do not sell your information and we do not show advertising in TIKK. TIKK has no analytics tools and no advertising tools.

Services TIKK relies on

The database and sign-in are hosted by Supabase (the database is in Mumbai, India); the website by Vercel (the files of the app and these pages; no chart is stored there); missed-dose emails are sent through Resend; Google provides Google sign-in and the Nunito font (when TIKK opens, your browser fetches the font from Google, so Google sees that request and your IP address); the prescription scan and the Hindi translation use Anthropic; reminders travel through your phone's push service. Each handles data under its own terms, for TIKK, to provide these functions.

Where your information is, and when it crosses a border

Charts, sign-in records and everything else in the lists above are stored in Mumbai, India. A prescription photo or PDF is sent for reading, and a short instruction for translation, to Anthropic's service (which runs in the United States), and is not kept by TIKK; an email to a carer passes through Resend (United States); reminders pass through Google, Apple or Mozilla's push service. If you live outside India (for example in the European Union or the United Kingdom) this means your information is processed in India and, for these few things, in the United States. We rely on each provider's own data-protection terms for that.

Security

Everything travels over HTTPS. The server only gives a chart to its owner and to the carers linked to it, and the hosting provider encrypts what it stores. No system is perfectly secure, so keep your share code and recovery details private. If something goes wrong that puts your information at risk, we will tell you and the authorities in the way the law requires.

How long TIKK keeps things

• Your chart and your account: until you delete them (in the app, at once) or ask us to (within 30 days). TIKK does not delete a chart because it has not been opened.
• Records of reminders sent: about two weeks, then they are removed; they are also removed with your account.
• Counters for fair use (scans today, attempts to join or recover a chart): they only matter for minutes to a day; they are removed with your account.
• Sign-in session records (time, IP address, type of phone or browser): kept by the sign-in service while the account exists, and removed with it.
• A Feedback message: until you ask us to delete it. The hosting provider's database backups: they drop out as they are replaced.

Keeping and deleting

Your information is kept until you delete it. You can stop or remove a medicine (it is archived, not erased: its doses stay in the chart and in the doctor report, it can be brought back for 90 days, and if a carer or the patient looks after the chart with you they are asked to approve first), remove a vital or a person in the app, and unlink a carer at any time. Only "Delete my account and data" erases a medicine and its doses. To delete everything, open TIKK, then Settings, More, Your data, and choose Delete my account and data: after you confirm, your charts, your sign-in, your reminder subscription, your recovery details and your usage records are erased from TIKK's server at once, and your phone is cleared. Carers lose access to the charts you owned; if you looked after someone as a carer, they keep their own chart. If you cannot open the app, see https://tikk.kariwala.com/delete-account/. The hosting provider's routine backups of the database are not used for anything else and drop out as they are replaced; a message you sent through Feedback is kept by TIKK's operator until you ask for it to be deleted.

Why TIKK may use your information, and your consent

TIKK handles health information (medicines, doses, vitals) only because you, or the person who looks after you, enter it and ask TIKK to remind you and to share it with the carers you choose. By using TIKK and accepting the Terms you give your consent for that; you can withdraw it at any time by deleting your account and data. Health information is never used for advertising or sold.

Your rights and choices

You can switch reminders off, keep a name private, stop sharing with a carer, change the language, correct or remove anything in a chart, make a PDF report of a chart (your copy of the information), and delete your account and data, all in the app.

Under India's Digital Personal Data Protection Act, 2023 you may ask what information TIKK holds about you, ask for it to be corrected or erased, name someone to act for you if you cannot, and complain about how it is handled. Under the EU and UK GDPR you have, in addition, the rights to receive a copy in a usable form, to restrict or object to its use, and to complain to your national data-protection authority. To use any of these, or to ask for anything you cannot do in the app, write to tikk@kariwala.com or use the Feedback button in Settings (choose TIKK). We will answer within 30 days. To protect other people's charts, we may ask for something that shows the chart is yours. This email address is also the grievance contact for people in India.

Changes

If this policy changes in a way that matters, we will ask you to review it again.