dischargeRx Privacy Policy

Draft for legal review — not legal advice. This policy is adapted to dischargeRx's actual architecture (Supabase, local-first storage, and an AI document-extraction provider). Every [BRACKETED] value must be completed, and the whole document reviewed by qualified counsel, before publication — especially because dischargeRx handles sensitive, health-adjacent data.

Effective date: 07/26/2026 Last updated: 07/26/2026

Plain-Language Summary

dischargeRx is a care organizer and reminder app. It imports the instructions your care team gives you and turns them into a schedule of reminders for medications, tasks, and appointments. To do that, it needs to store the care details you enter or confirm. This policy explains what we collect, how we store it, who can see it, and the rights you have over it.

We do not sell your personal or health data.
We do not share it with advertisers or data brokers.
Your care data is stored on your device by default; it only leaves your device when you sign in and turn on sync, or when you choose to share or export it.
You can export or delete everything at any time.
dischargeRx does not diagnose, prescribe, recommend treatment, or replace your clinician, doctor, pharmacist, or emergency services. It organizes the instructions you already received.

1. Who We Are and How to Contact Us

dischargeRx is operated by Haney Group, LLC ("dischargeRx", "we", "us", "our"), registered in the State of Texas.

For any privacy question, request, or concern:

Email: privacy@dischargerx.app
In-app: Settings → Help & Support
Postal: P.O. Box 521, Austin, TX 78767

We aim to respond to privacy enquiries within 14 business days, and to complete verified deletion or export requests within 30 days of confirming your identity.

2. The Information We Collect

We collect information you give us directly, a small amount your device generates automatically, and — if you use a care circle — information helpers add on your behalf.

2.1 Information You Provide Directly

Account details — name, email address, an encrypted password (managed by Supabase Auth), profile photo, sign-in identifiers, and your marketing-email preference (§3.6).
Care data — care plans, medication and supplement names you enter or confirm, doses, schedules, instructions, alarms/reminders, completion and dose history, refill counts, free-text notes, and care-team contact details.
Uploaded documents — discharge papers, prescriptions, visit summaries, or photos of medication labels that you scan or upload.
Helper / caregiver data — helper names, invite codes, the permissions you grant, caregiver notes, encouragements, and care-circle activity.
Subscription data — household billing metadata (e.g. plan tier and status) when premium features are used.
Support communications — the content of messages you send us.

2.2 Information Collected Automatically

Minimal technical diagnostics needed to operate sync, document extraction, and support.
Server-side access logs kept by Supabase for security and debugging of database, auth, storage, and function requests.
IP address observed at sign-in for security and abuse prevention. We do not use it to build advertising profiles.

dischargeRx does not currently use any third-party analytics or crash-reporting SDK (the in-app analytics layer is a no-op). If that ever changes, this policy will be updated first, and event data will never contain medication names, diagnoses, plan names, notes, or other health details.

2.3 Information We Do Not Collect

No location. The app does not request location permission or collect GPS.
Camera, photo library, and document picker are used only when you scan or upload a document, with your permission at that moment — never in the background and never otherwise.
No biometric data. Face ID / Touch ID (if you enable it) is handled entirely by your device's operating system and never sent to us.
No data from other apps, and no data purchased from data brokers.
No advertising SDKs, tracking pixels, or cross-app trackers.

3. How We Use Your Information

We use your information only to run the app and support you. We never use your care data, dose history, or documents for advertising, profiling, or sale.

3.1 Core functionality

Display your schedule and "what's next"; record completions; compute adherence and streaks from your own history; send on-device local notifications for reminders and refill alerts; and sync your data across your devices when you enable sync.

3.2 Care-circle features

Let helpers you invite see the care plan and status per the permissions you grant; deliver missed-step alerts and encouragements within the circle.

3.3 Account and security

Verify your identity, protect against unauthorized access, send password-reset emails (via Supabase Auth), and enforce subscription entitlements.

3.4 Support, improvement, and legal

Respond to support requests, diagnose technical problems, and comply with applicable law or valid legal process.

3.5 What We Will Never Do

Never sell your personal, care, or health data.
Never share it with advertisers or data brokers for ad profiling.
Never use your care data to train commercial machine-learning models shared with third parties.
Never make automated decisions about your healthcare from your data.

3.6 Marketing Communications

If you sign in and opt in (Settings → Product & premium emails), we may email you about dischargeRx Premium — for example, when your in-app usage suggests a premium feature would help (you've hit the free-tier limit scanning a document, added a second person to care for, or restored a lapsed subscription).

These emails are triggered only by in-app feature usage. We never use your care plan content, medication names, diagnoses, or any other health detail to decide who receives a marketing email or what it says.

Off by default. You must actively opt in; we never enable this for you.
Withdraw anytime in Settings, or by unsubscribing from any marketing email — both take effect immediately. Deleting your account also clears this preference.
Never required. Opting out never affects your account, reminders, or subscription. Those are separate transactional messages (e.g. password resets, billing receipts) that continue regardless of this setting.
Signed-in only. This preference only exists for accounts with an email on file — there is nothing to opt into while using dischargeRx signed out.

4. Legal Basis for Processing (where applicable)

Contract — processing the care data needed to provide the app you signed up for.
Legitimate interests — security, abuse prevention, and reliability.
Consent — optional features, care-circle sharing, and any marketing (opt-in, see §3.6). You may withdraw consent at any time.
Legal obligation — retaining records and responding to lawful requests where required.

5. How We Store and Protect Your Data

5.1 Local-first

By default your care data is stored on your device in the app's private storage. If you do not sign in (or Supabase is not configured), your data never leaves the device except through an OS backup you control, or when you export or share it yourself.

5.2 Cloud sync (Supabase)

When you sign in and enable sync, household data is stored in Supabase (PostgreSQL), encrypted in transit (TLS) and at rest. Row-Level Security (RLS) policies are intended to restrict each household's data to its own signed-in members. Your authentication session is kept in your device's secure keystore (iOS Keychain / Android Keystore).

5.3 Documents and extraction

Scanned or uploaded documents are stored in a private Supabase Storage bucket (care-documents) and viewed through short-lived signed URLs. When you ask dischargeRx to read a document, its content is sent to our AI extraction provider (Anthropic) to produce a draft plan for your review. Nothing from an extraction becomes an active plan until you review and confirm it. dischargeRx must not log document text, images, file contents, tokens, or extracted medical details.

5.4 Access controls

We apply least-privilege access. Production access to user data follows an approval process and is logged; we do not use it for routine operations.

5.5 Breach response

If a breach is likely to create a risk to your rights, we will notify affected users and, where required, the relevant authority within the timeframes the law mandates (typically 72 hours for regulatory notice). See breach-response-process.md.

6. Who We Share Your Data With

6.1 Your care circle

Helpers you invite gain the visibility you grant them. You choose each helper's role and can remove them at any time.

6.2 Service providers (sub-processors)

Supabase — authentication, database, storage, Edge Functions, and transactional auth email (e.g. password resets).
Anthropic — AI document extraction. Receives the document content you submit for reading; does not receive your account credentials.
Resend — when you choose Email invitation, receives the helper's email address, your display name, and the invitation code and app links to send that message. No care-plan details are included. We keep the recipient and sending record in Supabase to prevent duplicate sends and limit abuse. Deleting an invitation does not immediately remove this sending record; deleting your account removes it from our database. Provider retention is separate.
Apple and Google — app distribution, sign-in delivery, notification delivery, and (if paid subscriptions are enabled) payment processing.

Payments: if and when paid subscriptions go live, purchases are processed by the Apple App Store / Google Play, with entitlements managed via RevenueCat. dischargeRx does not receive or store your full payment-card details. (Subscription state is currently handled locally; update this section when real billing is enabled.)

We do not use Firebase/Firestore, FCM, Crashlytics, SendGrid, or any advertising or analytics broker.

6.3 Legal disclosures

We may disclose information where legally required or in response to valid legal process, and will notify you where permitted by law.

6.4 Business transfers

If dischargeRx is acquired or merged, your data may transfer. We will give you at least 30 days' notice and the option to delete your account first.

6.5 With your consent

We share with anyone else only with your explicit, informed consent.

7. Data Retention

Data	Retention
Account & profile	Until you delete your account, then permanently deleted within 30 days
Care data, history, documents	Until you delete them or delete your account
Marketing-email consent	Until you opt out or delete your account
Security / access logs	90 days
Support communications	24 months

See data-deletion-process.md. After cloud deletion, dischargeRx verifies deleted data does not reappear on the next sync.

8. Your Rights and Choices

We honor these rights regardless of where you live.

Access / portability — view your data in the app; export it as an Excel spreadsheet (or, for a machine-readable copy, structured JSON), and generate PDF care reports and calendar (.ics) files. For a full export, contact privacy@dischargerx.app.
Correction — edit your name, email, and care records in the app.
Deletion — Settings → erase local data; for a synced account, request full cloud deletion (irreversible; completed within 30 days).
Withdraw consent — e.g. remove a helper to stop care-circle sharing, or turn off Product & premium emails in Settings (§3.6) at any time.
Object / restrict — contact us to object to or restrict certain processing.
Complaint — you may lodge a complaint with your data-protection authority; we ask that you contact us first.

9. Children's Privacy

dischargeRx is not directed at children under 13, and we do not knowingly collect their data. For minors 13–17, a parent or guardian must consent; a caregiver may set up a profile for a minor with proper authorization.

10. International Data Transfers

dischargeRx's backend is hosted by Supabase in East US (Ohio). Where data is transferred out of the EEA/UK to a country without an adequacy decision, we rely on Standard Contractual Clauses.

11. Cookies and Tracking

dischargeRx is a mobile app and uses no browser cookies. It stores an authentication session token in your device's secure keystore for sign-in only. It uses no advertising SDKs, analytics trackers, or cross-app tracking.

12. Jurisdiction-Specific Provisions

California (CCPA/CPRA): we do not sell personal information and do not share it for cross-context behavioral advertising. Contact privacy@dischargerx.app to exercise your rights.
EEA / UK (GDPR): the Data Controller is Haney Group, LLC; contact our data-protection point of contact at dpo@dischargerx.app.
Texas: Haney Group, LLC is registered and operates exclusively in the State of Texas; see our Terms of Service for governing law.

13. Changes to This Policy

For material changes, we will notify you at least 30 days in advance by in-app notice and email. If you disagree, you may close your account before the change takes effect.

Summary of Key Commitments

We collect only what's needed to organize your care. We store health-adjacent data with encryption in transit and at rest and restrict it with Row-Level Security. We don't sell your data or share it with advertisers. You can export or delete it anytime. dischargeRx organizes your care team's instructions — it is not a pharmacy, a medical database, or a source of medical advice.