Security & your data

Care information is sensitive. Here's how dischargeRx is built to protect it, in plain language. For the formal detail, see our Privacy Policy.

Local-first by default

Your plans and history live on your device. If you don't sign in, your care data never leaves your phone except through a backup you control or something you choose to export or share.

Encrypted in transit and at rest

When you sign in and enable sync, data is sent over encrypted connections (TLS) and stored encrypted at rest by our cloud provider (Supabase). Your sign-in session is kept in your device's secure keystore (iOS Keychain / Android Keystore).

You decide who sees what

Helpers see only what you grant them, and you can change permissions or remove a helper at any time. Access is enforced by database Row-Level Security, so care data is restricted to the signed-in members of your own care circle.

Documents you scan

When you scan care papers, they're stored privately and sent to our extraction provider only to produce a draft plan for your review. Nothing becomes an active plan until you confirm it.

What we don't do

• We don't sell your personal or health data.
• We don't share it with advertisers or data brokers.
• We don't use advertising or cross-app tracking SDKs.

Your controls

• Export your data (JSON) and reports (PDF) from the app.
• Delete your data anytime — see Delete your account & data.
• Report a security concern to security@dischargerx.app.