Effective May 13, 2026

Privacy

This page covers two things separately: what the rxrescue.us website collects when you visit it or sign up for a trial, and what the RxRescue app stores on your devices and on our servers once you're a customer. They are different surfaces with different data, and we want both to be plain.

The website (rxrescue.us)

What we collect when you browse the site

The pages you read on this site do not set tracking cookies. There is no Google Analytics, no Meta Pixel, no Hotjar, no session recording, and no third-party advertising tag. The site is hosted on Vercel, which logs basic request metadata (IP address, user agent, request path, response status) to operate the CDN and protect against abuse. Vercel retains those logs per its privacy policy; we don't extract them for marketing.

What we collect when you start a free trial

The signup form on /signup asks for your pharmacy name and email address. Those values are sent to a server-side function that creates an account record in our Supabase database, generates a setup code for your pharmacy, and starts a Stripe Checkout session for billing. Specifically:

• Pharmacy name and email: stored on a row in our pharmacies table on Supabase. Used to identify your account, to send the setup code and receipts, and to contact you about service-affecting changes.
• Stripe Checkout: Stripe collects and processes your payment information. We do not see, store, or transmit your card number — it goes directly from your browser to Stripe's servers. Stripe's privacy policy covers what they do with it.
• Setup code: we generate a short code unique to your pharmacy and email it to you immediately after checkout (subject line "RxRescue — your setup code"). We do not share setup codes with anyone outside your pharmacy.

What we collect when you contact us

Email sent to info@rxrescue.us, support@rxrescue.us, or john@rxrescue.us arrives in our inbox. We retain it for as long as needed to respond and follow up, and we don't use it for marketing without your explicit opt-in. The site does not have a contact form that submits to a third-party service.

The RxRescue app

What the app stores

RxRescue tracks medication inventory, not patients. The app database stores product and stock data such as GTIN, NDC when available, drug name, dose, lot number, serial number, expiration date, quantity, zone, status, audit history, device sync status, and license state. Local app data is encrypted at rest using AES-256 (SQLCipher on mobile, Windows DPAPI-protected encryption keys on desktop).

The No-PHI boundary

RxRescue must not be used to store patient names, prescription numbers, dates of birth, diagnoses, insurance, prescriber identifiers, patient labels, or person-specific dispensing records. The CSV import path actively rejects column names that look like patient identifiers. The product is designed not to collect PHI; if you need to track patient-specific dispensing, RxRescue is not the right tool.

Cloud sync

If multi-device sync is enabled (it is, by default, for trial customers), structured inventory and audit events are synced through the RxRescue Supabase backend in the United States. The transport stores those events as an encrypted, append-only delta log that the app uses to relay scans, edits, and audit entries between your devices; the durable history also enables peer recovery if a device is lost. Each pharmacy's data is isolated by setup code; pharmacies cannot see each other's records. Sync messages carry inventory and audit content only — no patient identifiers, no payment data, no setup-code secrets in plaintext.

Billing

Subscription billing is handled by Stripe. We receive metadata from Stripe (subscription status, current period end, customer ID, invoice IDs) via webhook so that the app can show your trial countdown and license status. We do not receive or store your card number.

Support bundles

From inside the app, Settings → Diagnostics → Share/Save support bundle generates a diagnostic export. The bundle is designed to include app version, device label, sync state summary, license state, and recent failed-scan diagnostics. By design it does not include setup code secrets, full sync transport URLs, payment data, or any inventory rows. We review the bundle template against this guarantee whenever the app's Diagnostics surface changes.

Cancellation and data deletion

You can cancel from the receipt email Stripe sent you, or by emailing support@rxrescue.us. Cancellation stops sync at the end of your current billing period. Local app data on your devices remains accessible and is yours to keep, export, or delete; uninstalling the app from a device removes the local data on that device. To request deletion of your account record on our servers, email support@rxrescue.us — we'll confirm and remove the row within a reasonable timeframe.

Children

RxRescue is a B2B tool for pharmacy staff. The site and the app are not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If we change this policy in a way that affects what we collect or how we use it, we'll update the effective date at the top and post a note in the next monthly customer email. Material changes — anything that meaningfully expands what we collect — will trigger a direct email to active customers.

Contact

Questions about this policy or about your data: email support@rxrescue.us. We aim to respond within two business days.