Security & your data

Care information is sensitive. Here's how dischargeRx is built to protect it, in plain language. For the formal detail, see our Privacy Policy.

Local-first, backed up by default

Your plans and history live on your phone, and the app works from that copy. When you finish setup, dischargeRx backs your plan up so a lost or broken phone doesn't lose it — setup tells you before anything is uploaded. Choose Keep it on this phone only in Settings at any time and dischargeRx deletes its copy and uploads nothing.

Encrypted in transit and at rest

Backups travel over encrypted connections (TLS) and are stored encrypted at rest by our cloud provider (Supabase). Your sign-in session is kept in your device's secure keystore (iOS Keychain / Android Keystore).

You decide who sees what

Helpers see only what you grant them, and you can change permissions or remove a helper at any time. Access is enforced in the database itself by Row-Level Security, so care data is restricted to the members of your own care circle.

Documents you scan

Scanned papers are stored privately and opened only through short-lived links. To read one, dischargeRx sends it to our extraction provider to produce a draft plan for your review. Nothing becomes an active plan until you confirm it, and document text is never written to our logs.

Payments

Premium is paid through the App Store or Google Play. dischargeRx never sees your card details; our subscription provider, RevenueCat, tells us only whether your care circle's subscription is active.

Reliability reports, not tracking

If you leave them on, dischargeRx sends reports when something fails — a crash, a sync that didn't finish, a reminder that didn't arrive — to our own servers only. They never contain medication names, notes, documents or anything you typed, and you can turn them off in Settings.

What we don't do

• We don't sell your personal or health data.
• We don't share it with advertisers or data brokers.
• We don't use advertising, analytics, or cross-app tracking SDKs.

Your controls

• Export your care data as a spreadsheet, and plans as PDF reports, from the app.
• Keep everything on your phone only, or delete it anytime — see Delete your account & data.

Reporting a security issue

If you believe you've found a vulnerability, email security@dischargerx.app with the steps to reproduce it. Please don't access, change, or keep anyone else's data while testing, and give us a chance to fix the issue before sharing it publicly. We'll acknowledge your report and keep you updated.