dischargeRx Privacy Policy

Effective date: 07/26/2026
Last updated: 10/25/2026

Plain-Language Summary

dischargeRx is a care organizer and reminder app. It imports the instructions your care team gives you and turns them into a schedule of reminders for medications, tasks, and appointments. To do that, it needs to store the care details you enter or confirm. This policy explains what we collect, how we store it, who can see it, and the rights you have over it.

• We do not sell your personal or health data.
• We do not share it with advertisers or data brokers.
• Your care data is stored on your device and backed up to dischargeRx once you finish setup, so it is not lost if something happens to your phone. Setup says so before anything is uploaded, and you can choose Keep it on this phone only in Settings at any time — dischargeRx then deletes its copy and uploads nothing. It also leaves your device when you share or export it.
• You can export or delete everything at any time.
• dischargeRx does not diagnose, prescribe, recommend treatment, or replace your clinician, doctor, pharmacist, or emergency services. It organizes the instructions you already received.

1. Who We Are and How to Contact Us

dischargeRx is operated by Haney Group, LLC ("dischargeRx", "we", "us", "our"), registered in the State of Texas.

For any privacy question, request, or concern:

• Email: privacy@dischargerx.app
• In-app: Settings → Legal & help → Help & Contact
• Postal: P.O. Box 521, Austin, TX 78767

We aim to respond to privacy enquiries within 14 business days, and to complete verified deletion or export requests within 30 days of confirming your identity.

2. The Information We Collect

We collect information you give us directly, a small amount your device generates automatically, and — if you use a care circle — information helpers add on your behalf.

2.1 Information You Provide Directly

• Account details — name, email address, an encrypted password (managed by Supabase Auth), profile photo, sign-in identifiers, and your marketing-email preference (§3.6). Until you add an email, Google or Apple login, your account is an anonymous account with a random identifier and no email; your phone also keeps a random recovery key for it, of which we store only a one-way hash.
• Care data — care plans, medication and supplement names you enter or confirm, doses, schedules, instructions, alarms/reminders, completion and dose history, refill counts, free-text notes, and care-team contact details.
• Uploaded documents — discharge papers, prescriptions, visit summaries, or photos of medication labels that you scan or upload.
• Helper / caregiver data — helper names, invite codes, the permissions you grant, caregiver notes, encouragements, and care-circle activity.
• Subscription data — if you subscribe to Premium: your plan (monthly or yearly), its status, renewal and expiry dates, which care circle it covers, and the store's transaction identifiers. We never receive your payment-card details (§6.2).
• Support communications — the content of messages you send us.

2.2 Information Collected Automatically

• Minimal technical diagnostics needed to operate sync, document extraction, and support.
• Server-side access logs kept by Supabase for security and debugging of database, auth, storage, and function requests.
• IP address observed at sign-in for security and abuse prevention. We do not use it to build advertising profiles.
• Anonymous reliability diagnostics, if you leave them on (Settings → Safety → Help improve reliability). These are records of failures, not of you: a crash, a sync that did not complete, a reminder that did not arrive, or a setup flow abandoned partway. Each report carries an error type, a redacted message and stack, a small set of non-identifying properties (counts, enums, booleans), the app version, the platform, and a random per-install id that is regenerated whenever you reset the app. You can switch this off at any time, which also discards anything not yet sent.

dischargeRx uses no third-party analytics or crash-reporting SDK. Reliability diagnostics go only to dischargeRx's own Supabase project — the same backend your account already uses — into a write-only table no app client can read back. They are retained for 90 days.

Diagnostics never contain medication names, diagnoses, procedure or plan names, document text, care notes, helper names, contact details, or free text of any kind. This is enforced in the app by an allowlist, not only by policy: property names that are not on the list are dropped, and messages and stack traces are scrubbed of quoted values, emails, long numbers, ids, and file paths before anything is queued.

2.3 Device Permissions and What We Do Not Collect

• No location. The app does not request location permission or collect GPS.
• Camera, photo library, and document picker are used only when you scan or upload a document, with your permission at that moment — never in the background and never otherwise.
• Calendar access is requested only when you choose to add appointments or prescription dates to your calendar. dischargeRx then lists your calendars so you can pick one, and writes or updates only the entries you chose. It does not read your other events, and nothing from your calendar is sent to us. Daily medication times are never written to your calendar.
• Notifications are scheduled on your device for reminders and refill alerts. "Speak the reminder out loud" uses your device's built-in voice; the app does not use your microphone.
• No biometric data.
• No data from other apps, and no data purchased from data brokers.
• No advertising SDKs, tracking pixels, or cross-app trackers.

3. How We Use Your Information

We use your information only to run the app and support you. We never use your care data, dose history, or documents for advertising, profiling, or sale.

3.1 Core functionality

Display your schedule and "what's next"; record completions; compute adherence and streaks from your own history; send on-device local notifications for reminders and refill alerts; and back up and sync your data across your devices unless you choose Keep it on this phone only.

3.2 Care-circle features

Let helpers you invite see the care plan and status per the permissions you grant — for example, missed steps, which a helper with that permission sees when they open dischargeRx — and share encouragements and care notes within the circle.

3.3 Account, security, and subscriptions

Verify your identity, protect against unauthorized access, send password-reset emails (via Supabase Auth), and apply your subscription to the care circle it covers.

3.4 Support, improvement, and legal

Respond to support requests, diagnose technical problems, and comply with applicable law or valid legal process.

3.5 What We Will Never Do

• Never sell your personal, care, or health data.
• Never share it with advertisers or data brokers for ad profiling.
• Never use your care data to train commercial machine-learning models shared with third parties.
• Never make automated decisions about your healthcare from your data.

3.6 Marketing Communications

If you sign in and opt in (Settings → Profile → Product & premium emails), we may email you about dischargeRx Premium — for example, when your in-app usage suggests a premium feature would help (you've hit the free-tier limit scanning a document, added a second person to care for, or restored a lapsed subscription).

These emails are triggered only by in-app feature usage. We never use your care plan content, medication names, diagnoses, or any other health detail to decide who receives a marketing email or what it says.

• Off by default. You must actively opt in; we never enable this for you.
• Withdraw anytime in Settings, or by unsubscribing from any marketing email — both take effect immediately. Deleting your account also clears this preference.
• Never required. Opting out never affects your account, reminders, or subscription. Those are separate transactional messages (e.g. password resets, billing receipts) that continue regardless of this setting.
• Signed-in only. This preference only exists for accounts with an email on file — there is nothing to opt into while using dischargeRx without a login.

4. Legal Basis for Processing (where applicable)

• Contract — processing the care data needed to provide the app you signed up for, including a subscription you purchase.
• Legitimate interests — security, abuse prevention, and reliability.
• Consent — optional features, care-circle sharing, and any marketing (opt-in, see §3.6). You may withdraw consent at any time.
• Legal obligation — retaining records and responding to lawful requests where required.

5. How We Store and Protect Your Data

5.1 Local-first, backed up by default

Your care data is stored on your device in the app's private storage, and is the copy the app works from. When you finish setup, dischargeRx creates an anonymous account for your phone and backs your plan up to it, so a lost or broken phone does not lose your plan. Setup tells you this before anything is uploaded. If you set up before this backup existed, nothing is uploaded until you answer the notice that asks.

If you choose Keep it on this phone only (Settings → Profile → Account & backup), your data never leaves the device except through an OS backup you control, or when you export or share it yourself.

An anonymous account can only be opened from the phone that made it. Add an email, Google or Apple login to reach your plan from another phone.

Your answers to the daily "how is today going?" check-in stay on your device. They are not backed up, shared with helpers, or included in diagnostics.

5.2 Cloud backup and sync (Supabase)

Backed-up household data is stored in Supabase (PostgreSQL), encrypted in transit (TLS) and at rest. Row-Level Security (RLS) policies restrict each household's data to its own members. Your authentication session is kept in your device's secure keystore (iOS Keychain / Android Keystore).

5.3 Documents and extraction

Scanned or uploaded documents are stored in a private Supabase Storage bucket and viewed through short-lived signed links. When you ask dischargeRx to read a document, its content is sent to our AI extraction provider (Anthropic) to produce a draft plan for your review. Nothing from an extraction becomes an active plan until you review and confirm it. dischargeRx does not log document text, images, file contents, tokens, or extracted medical details.

5.4 Access controls

We apply least-privilege access. Production access to user data follows an approval process and is logged; we do not use it for routine operations.

5.5 Breach response

We maintain a written breach-response process. If a breach is likely to create a risk to your rights, we will notify affected users and, where required, the relevant authority within the timeframes the law mandates (typically 72 hours for regulatory notice).

6. Who We Share Your Data With

6.1 Your care circle

Helpers you invite gain the visibility you grant them. You choose each helper's permissions and can remove them at any time.

6.2 Service providers (sub-processors)

• Supabase — authentication, database, storage, Edge Functions, and transactional auth email (e.g. password resets).
• Anthropic — AI document extraction. Receives the document content you submit for reading; does not receive your account credentials.
• Resend — when you choose Email invitation, receives the helper's email address, your display name, and the invitation code and app links to send that message. No care-plan details are included. We keep the recipient and sending record in Supabase to prevent duplicate sends and limit abuse. Deleting an invitation does not immediately remove this sending record; deleting your account removes it from our database. Provider retention is separate.
• RevenueCat — manages Premium subscriptions. Receives your dischargeRx account identifier, the identifier of the care circle a purchase is for, the store's purchase and renewal records, and the technical details needed to process those requests (such as device type, operating-system and app version, store country, and IP address). It does not receive your care data, documents, or payment-card details. RevenueCat tells our server when a subscription starts, renews, or ends, so Premium can be applied to the right care circle.
• Apple and Google — app distribution, sign-in, notification delivery, and payment processing. Purchases are made through your Apple or Google account; dischargeRx never receives or stores your payment-card details.

We do not use Firebase/Firestore, FCM, Crashlytics, SendGrid, or any advertising or analytics broker. Reliability diagnostics (§2.2) are first-party only — they are stored in dischargeRx's own Supabase project and shared with nobody.

6.3 Legal disclosures

We may disclose information where legally required or in response to valid legal process, and will notify you where permitted by law.

6.4 Business transfers

If dischargeRx is acquired or merged, your data may transfer. We will give you at least 30 days' notice and the option to delete your account first.

6.5 With your consent

We share with anyone else only with your explicit, informed consent.

7. Data Retention

See how account deletion works. After cloud deletion, dischargeRx verifies deleted data does not reappear on the next sync.

8. Your Rights and Choices

We honor these rights regardless of where you live.

• Access / portability — view your data in the app; Settings → Profile → Export my data gives you an Excel spreadsheet of your care data, and you can generate PDF care reports and calendar (.ics) files. For a machine-readable (JSON) copy, contact privacy@dischargerx.app.
• Correction — edit your name, email, and care records in the app.
• Deletion — Settings → Profile → Delete account and start over deletes your account and its cloud data and erases the app on your phone (irreversible; anything remaining in backups or logs is purged within 30 days). Without a login, Erase all data and start over does the same for the data on your phone and its backup. Choosing Keep it on this phone only deletes the backup and keeps the plan on your phone. Deleting your account does not cancel a store subscription — cancel it in your App Store or Google Play settings.
• Withdraw consent — e.g. remove a helper to stop care-circle sharing, or turn off Product & premium emails in Settings (§3.6) at any time.
• Object / restrict — contact us to object to or restrict certain processing.
• Complaint — you may lodge a complaint with your data-protection authority; we ask that you contact us first.

9. Children's Privacy

dischargeRx is not directed at children under 13, and we do not knowingly collect their data. For minors 13–17, a parent or guardian must consent; a caregiver may set up a profile for a minor with proper authorization.

10. International Data Transfers

dischargeRx's backend is hosted by Supabase in East US (Ohio). Where data is transferred out of the EEA/UK to a country without an adequacy decision, we rely on Standard Contractual Clauses.

11. Cookies and Tracking

The dischargeRx app uses no browser cookies. It stores an authentication session token in your device's secure keystore for sign-in only. It uses no advertising SDKs, analytics trackers, or cross-app tracking. Reliability diagnostics are first-party, contain no health information, and can be switched off in Settings. Our website, dischargerx.app, sets no cookies and runs no analytics.

12. Jurisdiction-Specific Provisions

• California (CCPA/CPRA): we do not sell personal information and do not share it for cross-context behavioral advertising. Contact privacy@dischargerx.app to exercise your rights.
• EEA / UK (GDPR): the Data Controller is Haney Group, LLC; contact our data-protection point of contact at dpo@dischargerx.app.
• Texas: Haney Group, LLC is organized under the laws of the State of Texas; see our Terms of Service for governing law.

13. Changes to This Policy

For material changes, we will notify you at least 30 days in advance by in-app notice and email. If you disagree, you may close your account before the change takes effect.

Summary of Key Commitments

We collect only what's needed to organize your care. We store health-adjacent data with encryption in transit and at rest and restrict it with Row-Level Security. We don't sell your data or share it with advertisers. You can export or delete it anytime. dischargeRx organizes your care team's instructions — it is not a pharmacy, a medical database, or a source of medical advice.

Haney Group, LLC · privacy@dischargerx.app · dischargerx.app © 2026 Haney Group, LLC. All rights reserved.