By default, Marivel collects nothing. No account, no analytics, no ads, no tracking. There is one exception, off by default: caregiver alerts through a server. If you switch that on, the rest of this page describes exactly what leaves your device.
What data does the app store?
Your medication, your schedules, your intake history and your stock. This is health data: under the GDPR, a special category of personal data that deserves extra protection.
Where is it?
Only in the app's private storage on your device (Android or iOS), shielded from other apps. There is no cloud storage and no synchronisation of your medication data.
Who can access it?
Only you. We have no technical way to view your medication data.
When does anything leave your device?
Only if you explicitly choose so, and only at that moment:
- Exporting a backup: you choose where the file goes. If you pick a cloud folder, that service's terms apply from then on.
- Caregiver alerts through the server: see below.
Caregiver alerts through the server (off by default)
This lets a server notify your caregiver when you do not confirm a dose — even when your phone is off or out of range. That is precisely why it cannot run from your device alone.
If you switch it on, this leaves your device:
- A random device number created when you enable it. It does not contain your name and cannot be traced back to you without this device.
- The times a dose is expected, up to a week ahead, and whether you confirmed them.
- A notification token from Google Firebase, needed to reach your device at all.
- When pairing: the name you enter yourself. It is passed to the other device and erased from the server immediately afterwards.
This does not leave your device:
The name of your medication, the dose, the strength, your schedules, your stock and your history. The alert therefore reads "a dose at 08:00 was not confirmed" and not which medication it concerns. What is not there cannot leak.
Who sees it?
The caregivers you paired yourself. They see the times, whether you confirmed, and when your device last reported in. The app shows you who is paired and you can end any link yourself.
Who processes it?
The controller is Dr. Mario Dekens (info@marivel.be). The server runs at Combell (Belgium). The notifications travel through Google Firebase Cloud Messaging, and for an iPhone through Apple afterwards. They see the contents of the notification — a time, not a medication. At Google that processing may also take place outside the European Union.
How long is it kept?
Intakes are erased after thirty days. Pairing codes expire after fifteen minutes. Names are erased as soon as they reach the other side. Your device number and your links remain until you delete them yourself.
How do you withdraw consent?
Switch the option off, or use the erase button: it removes everything about this device from the server. You can withdraw at any time, with no consequences for the rest of the app.
Your rights
For everything local, you exercise your GDPR rights directly: access and portability through the export function, erasure by deleting the data or the app. For what is on the server, use the erase button in the app or contact the address above.
Deletion
If you uninstall the app, all local data goes with it. Erase your server data first if you used that function: after uninstalling you can no longer reach it. Make a backup too if you want to keep your data.
What this policy is not
Marivel is a memory aid, not a medical device within the meaning of European regulation 2017/745 (MDR). This page describes only the data processing, not the full terms of use or the medical disclaimer — those are in the app itself, under Overview.