top of page

Data & Privacy Policy

Last updated: 25 April 2026

rmndr ltd ("we", "us", or "our") is committed to protecting your privacy. This Policy explains how we collect, use, store, and protect your personal data when you use our smart pill pot, mobile app, and associated services ("Services").

1. Who We Are

We are rmndr ltd, a company registered in England and Wales (company name: RMNDR LTD), with registered office at 86-90 Paul Street, London, EC2A 4NE. We provide a medication reminder service comprising a smart pill pot, mobile application, and user dashboard.

We act as the data controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any data protection queries, our data protection contact is reachable at hello@thermndr.com.

2. What Data We Collect

We collect the following categories of data:

  • Identity & Contact Data: name, email address, and (where applicable) postal/shipping address and phone number.

  • Account & Profile Data: account credentials, notification settings, language and accessibility preferences, push notification tokens, referral or promotional codes.

  • Medication & Adherence Data (health data): medications you track, scheduled reminder times, adherence events (e.g., when a dose is marked taken), streaks, and achievements.

  • Care-Team Sharing Data: if you invite a care-team member to view your dashboard, we collect the contact details you enter for that person and process the sharing relationship.

  • Purchase & Billing Data: order details, transaction records, billing and shipping address. We do not receive or store full payment card details — these are handled directly by our payment processor.

  • Device & Technical Data: app version, operating system, device type, IP address and approximate location (derived from IP), diagnostics and crash logs, and in-app usage and interaction data (e.g. screen views, feature usage, button taps) collected via analytics tools. We do not use advertising identifiers (such as IDFA) or track users across other companies' apps or websites.

  • Support Correspondence: communications you send to us (including any photos or videos shared as part of a support request).

  • Optional Demographic Data: gender and age band (e.g., 18–24, 25–34, etc.). We do not require full date of birth. "Prefer not to say" is available.

Sensitive data notice: Medication and adherence data, and care-team sharing data linked to medication, constitute special category health data under the UK GDPR. We process this data only with your explicit consent under Article 9(2)(a) UK GDPR, in addition to the lawful basis for processing under Article 6.

3. How We Collect Your Data

We collect data when you:

  • create an account or purchase our product,

  • use the app to schedule reminders and record adherence,

  • interact with the smart pill pot (via the app),

  • invite a care-team member to view your dashboard,

  • contact support or engage with in-app features,

  • optionally provide demographics,

  • visit our website (see Section 13 on cookies and similar technologies).

4. How We Use Your Data

We use your data to:

  • Provide the Services: schedule reminders, send notifications (including critical alerts), power your dashboard and stats, fulfil orders, deliver hardware, manage your subscription, facilitate dashboard sharing, and provide customer support.

  • Maintain & Improve: monitor performance, debug issues, enhance security, and develop new features.

  • Analytics & Research: analyse in-app behaviour (such as screen views, feature usage, and interactions) using aggregated and/or de-identified data to understand how our Services are used, improve usability, develop new features, and inform business decisions. This analytics activity is first-party, limited to our Services, and is not used for advertising, profiling, or cross-app tracking. We apply measures designed to reduce the risk of re-identification.

  • Communicate with You: send service-related messages (e.g., order confirmations, security notices, policy changes) and, with your consent, marketing communications.

  • Legal & Compliance: meet legal, regulatory, tax, and safety obligations.

If we intend to use your health or demographic data for new purposes that are not compatible with the purposes described at the time of collection, we will seek your consent where required and/or provide appropriate opt-out options.

5. Legal Basis for Processing

Depending on the context, we rely on:

  • Contract (Article 6(1)(b) UK GDPR): to provide the Services you use or purchase, fulfil orders, manage your subscription, and provide support.

  • Explicit Consent (Article 9(2)(a) UK GDPR): for processing your health data (medication and adherence data, care-team sharing data). You provide this consent when you set up reminders or invite a care-team member, and you may withdraw it at any time in the app or by contacting us. Withdrawing consent will mean we can no longer provide the core reminder and tracking features.

  • Consent (Article 6(1)(a) UK GDPR): for marketing emails, optional demographics, push notifications, and other non-essential purposes. You may withdraw consent at any time.

  • Legitimate Interests (Article 6(1)(f) UK GDPR): to understand how our Services are used, improve performance and user experience, and maintain security, including through first-party product analytics, balanced against your rights and expectations.

  • Legal Obligation (Article 6(1)(c) UK GDPR): to comply with applicable laws, including tax and accounting obligations.

6. Sharing & Disclosure

We do not sell your personal data.

We may share data as follows:

  • Service Providers (Processors): trusted vendors processing data on our instructions under contractual safeguards. Categories include: cloud hosting and infrastructure providers, payment processors, email and notification delivery providers, shipping and logistics providers, customer support tools, and analytics providers. Where these providers are located outside the UK, see Section 7 on international transfers.

  • Care-Team Members You Invite: if you choose to invite a family member, friend, or healthcare professional to view your dashboard, your medication and adherence data is shared with that person at your direction. You can revoke this access at any time in the app. See our separate Dashboard Sharing Policy for details.

  • Legal/Safety: where required by law or necessary to protect rights, safety, or the integrity of our Services.

  • Aggregated/De-identified Data: we may use and share aggregated and/or de-identified information (including insights by age band and gender) that does not identify you.

  • Business Transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred to relevant parties, subject to applicable law and your rights.

If our practices change to constitute a "sale" or "sharing" of personal data under applicable law, we will update this Policy and provide required consent and/or opt-out mechanisms before such activity.

7. Data Storage & International Transfers

Our primary database for medication and adherence data is hosted in the United Kingdom (Google Cloud's London region). Some other components of our infrastructure (including authentication, crash reporting, analytics, and certain backend services) may process or transit data through servers located in the United States or other jurisdictions.

Where data is transferred outside the UK, we implement appropriate safeguards consistent with UK GDPR, including:

  • UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses;

  • Data processing terms with our providers requiring equivalent protections;

  • Reliance on UK adequacy decisions where applicable.

You can request a copy of the transfer safeguards by contacting us at hello@thermndr.com.

8. Data Retention

We retain personal data only for as long as necessary to provide the Services and for legitimate business or legal purposes:

  • Account & medication data: retained for the life of your account. If your account is inactive for 24 months, we may delete or de-identify your data after notifying you.

  • Billing and tax records: retained for 6 years, in line with HMRC requirements.

  • Support correspondence: retained for up to 3 years after the conversation ends.

  • Consent records (version and timestamp): retained for 7 years after consent is withdrawn or the account is closed, to demonstrate compliance.

  • Care-team invitations not accepted: the invitee's contact details are deleted after 30 days if the invitation is not accepted.

  • Marketing data: deleted promptly when you unsubscribe or withdraw consent.

9. Your Rights

Subject to applicable law, you may:

  • Access your personal data;

  • Rectify inaccurate or incomplete data;

  • Erase data ("right to be forgotten");

  • Restrict or Object to processing;

  • Port data to another provider;

  • Withdraw consent at any time (does not affect prior lawful processing);

  • Lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or on 0303 123 1113. We would, however, appreciate the chance to address your concerns first — please contact us before approaching the ICO.

Some adherence data used for your stats may not be editable in-app; contact us for review or deletion where applicable.

10. Managing Your Data & Consent

Within the app you can:

  • delete reminders and adjust notification settings,

  • add/update/remove gender and age band (optional),

  • review and toggle consents (e.g., health data processing, demographics, analytics, marketing),

  • revoke care-team member access at any time.

You can also email hello@thermndr.com to exercise any of your rights or withdraw consent.

11. Automated Decision-Making and Profiling

We do not use solely automated decision-making (including profiling) that produces legal effects or similarly significantly affects you. The adherence statistics, streaks, and achievements shown in the app are informational displays of your own data and do not constitute automated decision-making.

12. Security

We implement administrative, technical, and physical safeguards appropriate to data sensitivity, including:

  • Encryption in transit (TLS 1.2 or higher) and at rest;

  • Access controls and authentication, including App Check with App Attest for the iOS app;

  • Role-based access for our staff, on a need-to-know basis;

  • Monitoring, logging, and incident response procedures.

No system is 100% secure. If we become aware of a personal data breach affecting your data, we will notify you and the ICO as required by law.

13. Cookies and Similar Technologies

Our website (thermndr.com) uses cookies and similar technologies. Cookies are small text files placed on your device that allow websites to remember your preferences and understand how the site is used.

We use:

  • Strictly necessary cookies — required for the website and checkout to function. These do not require consent.

  • Analytics cookies — to understand how visitors use our website. These are set only with your consent via our cookie banner.

  • Marketing cookies (where applicable) — to measure the effectiveness of our marketing. These are set only with your consent.

You can manage your cookie preferences at any time through the cookie banner on our website or by adjusting your browser settings.

The mobile app does not use cookies. It uses standard mobile platform identifiers (such as device tokens for push notifications) which are described in Section 2.

14. Children's Privacy

The Services are not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we may have inadvertently collected data from a child under 16, please contact us at hello@thermndr.com and we will take steps to delete the information.

15. Where You'll Find This Policy

This Policy is hosted on our website (canonical version) and is also linked within the app (e.g., Settings and onboarding). We will prompt for re-consent in-app if we make material changes that require it.

16. Contact Us

Email: hello@thermndr.com

Phone: [to be added]

Registered office: [to be added], United Kingdom

17. Updates to This Policy

We may update this Policy to reflect legal, technical, or business changes. We will post updates with a new "Last updated" date and, where required, notify you and/or seek consent.

bottom of page