Privacy Policy

1. Overview

RxNudge ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our medication reminder service at rxnudge.app ("the Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information You Provide Directly:

• Account information: name, email address, password
• Patient information: names, phone numbers, time zones
• Medication information: medication names, dosages, schedules, reminder times
• Family/caregiver contact information you add to the Service
• Payment information (processed securely by Stripe — we do not store card numbers)

Information Collected Automatically:

• Log data: IP address, browser type, pages visited, time spent
• Device information: device type, operating system
• Usage data: features used, actions taken within the Service
• Call and message delivery logs (for service reliability purposes)

3. How We Use Your Information

We use collected information to:

• Provide and operate the medication reminder Service
• Send reminder calls and text messages on your configured schedule
• Send alert notifications to designated family members or caregivers
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password reset, reports)
• Monitor and improve the performance and reliability of the Service
• Respond to customer support requests
• Comply with legal obligations

We do not sell, rent, or trade your personal information or health-related data to third parties for marketing purposes.

4. Health Information

The medication and patient information you enter into RxNudge may be considered health-related information. We treat this data with heightened care:

• Health data is encrypted in transit and at rest
• Access is restricted to authorized service components only
• We do not share health data with advertisers or data brokers
• Health data is used solely to provide the reminder Service you have configured

As noted in our Terms of Service, RxNudge is not a HIPAA Covered Entity. If HIPAA compliance is required for your use case, RxNudge may not be appropriate for your needs.

5. Information Sharing & Disclosure

We may share your information with:

• Service Providers: Third-party vendors who help operate the Service (Supabase for database, Twilio for calls/SMS, Stripe for payments, Resend for email). These providers are bound by confidentiality obligations.
• Family Members / Caregivers: Alert notifications are sent to the contacts you designate within the Service.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Call Recording

Reminder calls placed by RxNudge may be recorded. In states requiring all-party consent (CA, FL, IL, MD, MA, MI, MT, NV, NH, OR, PA, WA), a verbal disclosure is played automatically at the start of every call before any recording begins.

Call recordings and transcriptions may be used to: (a) confirm medication responses, (b) improve voice recognition accuracy, and (c) resolve disputes. Recordings are retained for up to 90 days and then deleted unless required for an active dispute.

7. Data Retention

We retain your account and medication data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. Dose log history may be retained in anonymized form for service improvement purposes.

8. Data Security

We implement reasonable technical and organizational security measures to protect your information, including TLS encryption for data in transit and encryption at rest. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk. In the event of a data breach affecting your information, we will notify you as required by applicable law.

9. Your Rights & Choices

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your account and associated data
• Opt-out: Opt out of non-essential communications at any time
• Portability: Request an export of your data in a portable format

To exercise these rights, contact us at privacy@rxnudge.app.

10. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

11. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice within the Service. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or requests, contact us at: privacy@rxnudge.app