App privacy

Updated: 23 September 2026 · Sikalias Pharmacy 1.4.1

Local functions

Your product list, quantities and completion markers, favourite categories, visit-preparation choices and reminder are stored on your device. The current app does not send them to the pharmacy or an advertising platform. These functions do not require an account. Do not enter health identifiers, prescriptions, medical records, dosages or passwords in the list.

Public pharmacy updates

The app retrieves public information from sikalias.gr without an account or sending your list. A local copy keeps the previous information available offline. The server receives the network address and necessary HTTP connection information. The website privacy policy also applies to the operation and security of the server.

Photographs and label checks

Camera permission is requested only when you choose to take a photograph. You can instead use the system photo picker or type ingredients. Greek and English text recognition and ingredient-policy matching happen locally. Images, text and results are not sent from the device.

The photograph and text remain in the current screen's memory until you clear them or leave the label feature. Temporary private-cache copies are removed after processing where the operating system permits. After a crash or failed deletion, a temporary file may remain until the operating system clears the cache or the app is uninstalled. The original photo you selected remains in your photo library. No scan history is stored and label contents are excluded from Debug reports.

Notifications

Permission is requested when you choose a reminder. It is scheduled locally and uses generic text, without list items. This version does not obtain a marketing push token or send remote campaigns.

Sharing and external services

If you choose to share, pending list items are passed to the app and recipient you select. Online shopping, maps and operator services open separately under their privacy policies. Purchases and payments are managed by the online shop.

Customer access and Bonus Card

When online customer access is enabled, sign-in, registration, card details, points and deletion of online access appear in a separate web window inside the app, over HTTPS at sikalias.gr. The app uses a temporary, isolated web session and does not read or copy passwords, card details or points into its native list, local preferences or diagnostic reports. The website processes the online-service data.

Registration uses an email and password. One-time email/SMS verification links open from the message and require sign-in to the same account. Return to the app and choose Refresh. The website uses a necessary session cookie. A customer record is linked only through a unique verified email or mobile match in a current contact index. Conflicting matches require pharmacy staff review.

The server keeps access details, verification status, the linked record, the last retrieved point balance and service requests. Passwords are stored as hashes; personal service data is encrypted. This area does not show prescriptions, health identifiers or medicine history. Verification links expire and can be used only once. Completed requests retain their fields for 30 days and completion status for 90 days. Necessary security activity records are retained for 90 days. Registration does not provide marketing consent.

Optional connection diagnostics

At your request, the app retrieves available technical status from the Sikalias server. Individual results may reflect earlier checks. A separate diagnostics key and address are stored in the device's secure storage. The bridge does not receive your list or accept customer information from the app. Necessary network data reaches the server, but is not included in the exported report. Server access logging is controlled by the website operator; the app does not add analytics SDKs or advertising identifiers.

The optional export contains only version, platform and predefined technical codes. It excludes secrets, card details, points, names, email addresses, IP addresses, URLs, device identifiers and raw responses. It is not sent to support automatically. You choose where to save or share it; an exported file remains there until you delete it.

Educational links

If you open the educational section, the app retrieves a public list of links from sikalias.gr without your list or photographs. Selected videos open on sikalias.org in the browser only at your request. The destination website's privacy policy applies. The app does not create a child account.

Support

If you email us, we use your contact details and message to handle your request. Do not send sensitive information unnecessary for support. Pharmacy transaction records are governed by the applicable pharmacy policy.

Control and deletion

More → Delete local data removes saved choices, cached public information, the diagnostics address and key, and cancels the reminder. An iOS Keychain key may survive uninstallation, so use deletion inside the app. Delete exported reports separately in Files. Deleting local data is separate from deleting online customer access. To delete online access, use the deletion option in the Bonus Card area or the account-deletion page, when available. Sign-in and password confirmation are required. This removes online access, verification tokens and personal fields of online service requests; the pharmacy customer record and transaction records are handled separately under the pharmacy policy. Contact pharmacy@sikalias.gr when the service is unavailable. Manage backups and previously shared copies separately through the operating system or service you chose.

Data deletion and external-account requests. For privacy questions contact pharmacy@sikalias.gr. This policy is reviewed when app functions change.