Policies
Privacy policy
This policy is written for a capability mock. It has not been reviewed by counsel, it is not published, and the values marked draft are business decisions that are not yet made.
Who this covers
This policy describes how Smart Cap would handle information for visitors to this online store and for people who use the Smart Cap reminder prototype. The store is currently a demonstration. No products are sold through it, and no customer accounts, payments, or device data are processed.
Information the store collects
When the store is live on Shopify, Shopify processes the categories of data that any Shopify storefront processes on our behalf:
- Order and contact information you provide at checkout, such as name, email, shipping address, and billing address.
- Payment information, which is handled by the payment processor. We do not receive or store full card numbers.
- Device and usage information such as IP address, browser type, and pages viewed, used to operate and secure the store.
- Optional analytics and marketing cookies, which are only set if you accept them. Declining leaves the store fully functional.
Information the device concept would collect
The Smart Cap prototype is designed to record cap-opening events. In the concept architecture, an event is a timestamp plus the state of the cap. It is recorded locally on the device and queued until an authorized user syncs it.
Three limits are deliberate and are stated the same way everywhere:
- An opening event is not proof that a dose was taken.
- The device does not identify the medication, the dose, or the person.
- The device infers compliance from opening events; it makes no diagnosis, treatment, or ingestion determination.
Because opening events can be health-adjacent, any live deployment requires a data protection review, a defined retention period, and a documented lawful basis before any event data is collected from real users. None of that has been completed, and no device data is collected today.
How information would be used
To fulfill orders, provide support, meet legal and tax obligations, secure the store against fraud and abuse, and, only with consent, to measure how the storefront is used. We do not sell personal information, and we do not use device event data for advertising.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. You can also decline optional cookies at any time using the cookie banner.
Retention
Order records would be retained as long as required for tax, accounting, and warranty purposes. A retention period for device event data is an open decision and must be set before any live collection.
Contact
Draft: publish a monitored contact address and, where required, a data protection representative before this policy goes live.