Rxact is built on a simple promise: your family's health information is yours. This Privacy Policy explains, in plain language, what information the Rxact app ("Rxact," the "App") collects, how we use it, who we do and don't share it with, and the choices and rights you have. It applies to the Rxact iOS app and the rxact.io website (together, the "Service"), which are operated by Grenada Digital LLC ("Grenada Digital," "we," "us," or "our").
Please read this policy carefully. By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.
At a glance
Because medication data is sensitive, here is the short version before the detail:
-
Your data lives on your device. Your medication and family information is stored on your device, and in your private iCloud account if you enable sync. We do not keep a copy on our own servers unless you create an optional Rxact account.
-
We do not sell your data. We have never sold personal information, and we do not share it with advertisers, data brokers, pharmaceutical marketers, or insurers.
-
No ads, no tracking across other apps. Rxact contains no third-party advertising and does not track you across other companies' apps and websites.
-
You are in control. You can edit or delete any person, medication, or record at any time, and you can delete all of your data by removing the App and your account.
-
HIPAA note. Rxact is a consumer app you use for yourself and your family. As such, we are generally not a "covered entity" or "business associate" under HIPAA, so HIPAA usually does not apply to the data you enter. Other laws — including the FTC Act, the FTC Health Breach Notification Rule, and state privacy laws — do protect this data, and we hold ourselves to those standards regardless.
Who this policy is for
Rxact is designed for caregivers — adults who manage medications for themselves, their children, and other people they care for, such as aging parents. Throughout this policy:
- "You" means the account holder or person using the App.
- "People you care for" means the family members or other individuals whose medications you track in the App.
When you add another person to the App, you confirm that you have the authority to manage that person's medication information — for example, because you are their parent, legal guardian, or designated caregiver — and that you will use their information only for their care and benefit.
Information we collect
We collect only what the App needs to do its job. The categories below describe the most we may collect; what actually applies depends on the features you choose to use.
2.1 Information you enter
To track medications, you provide information such as:
- The names of the people you care for (which can be first names, initials, or nicknames — you choose), and optionally their age or date of birth.
- Medications, dosages, schedules, instructions, and the reason a medication is taken.
- Supply counts, refill dates, and pharmacy or prescriber names you choose to record.
- Dose history — whether a dose was taken, skipped, or snoozed, and when.
- Notes you add and, optionally, the contents of medication lists you export.
Much of this is health-related information about you and the people you care for. We treat all of it as sensitive and protect it accordingly.
2.2 Account information (only if you create an account)
Using Rxact does not require an account. If you choose to create one — for example, to back up or sync across devices — we collect your email address and authentication credentials. We do not store your password in readable form.
2.3 Purchase information
If you buy a subscription or other paid feature, the transaction is processed by Apple through the App Store. We receive limited records such as subscription status, renewal dates, and transaction identifiers. We never receive or store your full payment-card number.
2.4 Information collected automatically
To keep the App reliable, we collect a limited amount of technical and diagnostic information:
- App version, device model, and operating-system version.
- Crash reports and basic, non-advertising diagnostic data.
- General usage signals (such as which features are opened) used only to fix bugs and improve the App.
We do not use advertising identifiers, build advertising profiles, or use device location to track you. If a future feature uses location (for example, a pharmacy reminder), we will ask for your permission first and explain why.
2.5 Information we do not collect
- We do not collect your contacts unless you specifically choose to share a medication list with someone.
- We do not access your photos, microphone, or precise location without an explicit, purpose-specific permission prompt.
- We do not require your real name, address, or government identifiers.
How we use your information
We use information only for the purposes below:
- To run the App. Showing each person's medications, sending dose and refill reminders, tracking supply, and generating the doctor-ready lists and logs you ask for.
- To sync and back up (if you enable it). Keeping your data current across your own devices through your private iCloud account or, if you create one, your Rxact account.
- To support you. Responding to your questions and troubleshooting problems you report.
- To improve the App. Diagnosing crashes and understanding which features need work, using diagnostic data only.
- To keep the Service secure. Detecting and preventing fraud, abuse, and unauthorized access.
- To meet legal obligations. Complying with applicable laws and valid legal requests.
We do not use your medication or family information to advertise to you, and we do not use it to make automated decisions that produce legal or similarly significant effects about you.
Where your information is stored
Rxact is built around on-device storage. The medication and family information you enter is held in the App's local database on your device.
- On your device. Your data stays on your device by default and is protected by your device's own security, such as your passcode or biometric lock.
- In your iCloud (optional). If you enable sync, Apple stores an encrypted copy in your personal iCloud account so it can appear on your other devices. That copy is governed by Apple's iCloud terms and privacy policy, and it is associated with your Apple account — not ours.
- In an Rxact account (optional). If you create an Rxact account for backup or sync, your data is stored with our hosting provider in encrypted form, accessible only to you through your credentials.
How we share information — and how we don't
We do not sell your personal information, and we do not share it for advertising or marketing. We share information only in the limited circumstances below.
| Who | What they receive | Why |
|---|---|---|
| People you choose | A medication list or log you export or share | Only when you actively share it — e.g., with a doctor, pharmacist, or family member |
| Apple | Purchase and subscription records; iCloud backup (if enabled) | To process payments and provide device sync you turn on |
| Service providers | Hosting and crash/diagnostic data, under confidentiality terms | To run, secure, and maintain the Service on our behalf |
| Authorities | Information required by valid legal process | Only when legally compelled, and narrowly |
| A successor | Personal information as a business asset | Only in a merger, acquisition, or sale, with notice to you |
Our service providers are contractually limited to using your information only to perform services for us. When you export and share a medication list yourself, the people or services you send it to handle it under their own practices, which we do not control.
Children's information
Rxact is intended for use by adults (18+) who manage medications for themselves and their families. The App is not directed to children, and we do not knowingly allow children to create accounts.
Caregivers may, of course, record medications for a child they care for. When you do, the child's information is entered and controlled by you, the responsible adult. We recommend using only a first name, initials, or nickname rather than full identifying details. We use this information solely to provide the medication-tracking features you request, never to contact or build a profile about a child.
If you believe a child has independently provided us personal information, contact us and we will delete it.
How we protect your information
Security is foundational to Rxact, not an add-on. Our safeguards include:
- Encryption of data in transit and at rest where data leaves the device (such as account backup or iCloud sync).
- Reliance on your device's built-in protections, including passcode and biometric locks, for on-device data.
- Access controls that limit who at Grenada Digital can reach any stored data, and confidentiality obligations on our providers.
- Data minimization — we collect and retain only what the App needs.
No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security. If a breach of unsecured identifiable health information occurs, we will notify affected users — and, where required, the U.S. Federal Trade Commission and others — consistent with the FTC Health Breach Notification Rule and applicable state laws.
How long we keep information
Data you enter remains available as long as you keep it in the App. Because the information lives on your device (and in your optional backup), you control its lifespan:
- Delete any person, medication, or record at any time inside the App.
- Delete the App to remove its local data from your device.
- Delete your optional Rxact account to remove backed-up data from our provider; we delete it within 30 days, except where we must retain limited records to meet legal or accounting obligations.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain uses. Because Rxact stores your data on your device and does not sell or share it for advertising, you can exercise most of these rights directly in the App at any time.
9.1 U.S. state privacy laws
Residents of California, Washington, and other states with consumer-privacy or consumer-health-data laws (such as the California Consumer Privacy Act and Washington's My Health My Data Act) have specific rights regarding their data, including health data. We honor these rights for all users regardless of location. We do not sell personal information or share it for cross-context behavioral advertising, so there is no such activity to opt out of.
9.2 Users outside the United States
The Service is operated from the United States and is intended solely for U.S. users. Grenada Digital does not offer, direct, or market the Service to residents of the European Economic Area, the United Kingdom, or any other jurisdiction outside the United States. The Service is not supported for use outside the United States.
If you access the Service from outside the United States, you do so entirely on your own initiative and without Grenada Digital's support or authorization. By doing so, you agree that: (a) your information will be transferred to and processed in the United States under U.S. law; (b) Grenada Digital bears no responsibility for your use of the Service or for any consequences of that use; and (c) Grenada Digital makes no representations that the Service complies with the laws of your jurisdiction. You are solely responsible for ensuring that your use complies with any applicable local laws.
Grenada Digital is not obligated to respond to data-subject requests or other privacy inquiries that arise under the laws of jurisdictions outside the United States. If you believe that the privacy laws of the European Economic Area, the United Kingdom, or any other non-U.S. jurisdiction apply to your use of the Service, please do not use the Service.
9.3 How to exercise your rights
You can manage and delete data directly in the App. For any request you cannot complete yourself, contact us using the details in Section 12. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.
Third-party services
Rxact relies on a small number of trusted providers — for example, Apple for the App Store, payments, and iCloud sync, and our hosting and crash-reporting providers. Their handling of information is governed by their own privacy policies. We choose providers that meet our security and confidentiality standards, and we limit them to processing data only on our behalf.
Changes to this policy
We may update this Privacy Policy as the App evolves or as laws change. When we make material changes, we will update the "Last updated" date above and notify you within the App or by email before the changes take effect, where required. Your continued use of the Service after an update means you accept the revised policy.
Contact us
If you have questions about this policy or your information, or you wish to make a privacy request, please reach out:
Grenada Digital LLC
Texas, United States
Email privacy@grenada-digital.com
Web rxact.io