CyNightMeds is built to be useful at 2am, that means we collect as little as we can get away with.
What we collect
Standard web logs (IP address, user agent, referrer, timestamps) for security, abuse prevention, and aggregated analytics. Your region preference, language, and saved pharmacies are stored locally on your device, not on our servers, unless you tell us otherwise. If you submit a report, we collect its category, reason, message, and any email address you choose to provide.
What we don't collect
- Your name or address
- Your prescriptions, medications, or any health data
- Your precise GPS coordinates (we ask the browser to detect your district; the coordinates stay on device)
Cookies and storage
We use first party cookies and localStorage for things like remembering your district and language. We use Vercel Analytics and Speed Insights for traffic and performance, these run cookieless.
How we use it
- To show you the right pharmacy schedule for your district
- To improve performance and find bugs
- To detect and prevent abuse
Legal bases
We run and secure the Service based on our legitimate interests under Article 6(1)(f) of the GDPR. We handle reports you submit based on our legitimate interest in keeping pharmacy listings accurate. If you leave an email so we can reply, we also process it to take steps you request. Push notifications rely on your consent. You can withdraw your consent at any time by disabling them in your browser settings.
Sharing
We don't sell or rent your data. We share with:
- Service providers, Vercel (hosting), Neon (database), under their respective privacy terms.
- Legal requests, only when legally required.
- Business changes, successors in the event of merger or sale.
International transfers
Vercel, which provides hosting and analytics, and our error monitoring provider may process data outside the European Economic Area, including the United States. Where this happens, the transfers are covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
Retention
We keep reports while we verify and fix the issue and for up to 12 months. We then delete or anonymise them. Any optional email address is deleted with the report. Server logs are kept only for a short period.
Security
We use HTTPS, modern security headers (CSP, HSTS), and reasonable technical measures. No internet service is 100% secure, but we treat data minimisation as the first line of defence.
Push notifications
If you opt in to push notifications, your browser's push endpoint is stored on our servers. Notifications include the next day's on call pharmacy summary. You can revoke at any time from your browser settings.
Your rights
Under EU/Cyprus law you can request access, correction, deletion, restriction, portability, or objection. Email us, see below. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).
Third party links
The Service links to Apple Maps, Google Maps, and Waze. Their privacy policies apply when you tap through.
Children
The Service isn't directed at children under 13. We don't knowingly collect data from them.
Changes
We update this page when we change anything material, with the date at the top.
Contact
Questions about privacy or data? [email protected].