Rxact is built on a simple promise: your family's health information is yours. This Privacy Policy explains, in plain language, what information the Rxact app ("Rxact," the "App") collects, how we use it, who we do and don't share it with, and the choices and rights you have. It applies to the Rxact iOS app and the rxact.io website (together, the "Service"), which are operated by Grenada Digital LLC ("Grenada Digital," "we," "us," or "our").
Please read this policy carefully. By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.
At a glance
Because medication data is sensitive, here is the short version before the detail:
-
Your data lives on your device. Your medication and family information is stored on your device in encrypted form, and in your private iCloud account if you turn on iCloud. We do not operate servers, accounts, or backups that receive your data, and we keep no copy of it.
-
We do not sell your data. We have never sold personal information, and we do not share it with advertisers, data brokers, pharmaceutical marketers, or insurers.
-
No ads, no tracking across other apps. Rxact contains no third-party advertising and does not track you across other companies' apps and websites.
-
You are in control. You can edit or delete any person, medication, or record at any time, delete everything at once with the "Delete All Data" button in Settings, or remove the App from your device entirely.
-
HIPAA note. Rxact is a consumer app you use for yourself and your family. As such, we are generally not a "covered entity" or "business associate" under HIPAA, so HIPAA usually does not apply to the data you enter. Other laws — including the FTC Act, the FTC Health Breach Notification Rule, and state privacy laws — do protect this data, and we hold ourselves to those standards regardless.
Who this policy is for
Rxact is designed for caregivers — adults who manage medications for themselves, their children, and other people they care for, such as aging parents. Throughout this policy:
- "You" means the person using the App.
- "People you care for" means the family members or other individuals whose medications you track in the App.
When you add another person to the App, you confirm that you have the authority to manage that person's medication information — for example, because you are their parent, legal guardian, or designated caregiver — and that you will use their information only for their care and benefit.
Information we collect
We collect only what the App needs to do its job. The categories below describe the most we may collect; what actually applies depends on the features you choose to use.
2.1 Information you enter
To track medications, you provide information such as:
- The names of the people you care for (which can be first names, initials, or nicknames — you choose), and optionally their age or date of birth.
- Medications, dosages, schedules, instructions, and the reason a medication is taken.
- Supply counts, refill dates, and pharmacy or prescriber names you choose to record.
- Dose history — whether a dose was taken, skipped, or snoozed, and when.
- Notes you add and, optionally, the contents of medication lists you export.
- Profile or medication pictures you choose to add from your camera, photos, or files.
Much of this is health-related information about you and the people you care for. We treat all of it as sensitive and protect it accordingly.
2.2 No account, no login
Rxact does not use accounts. You do not create a username, password, or profile to use the App, and we do not collect an email address or authentication credentials. Because there is no account, there is nothing for us to store about your identity.
2.3 Purchase information
If you buy a subscription or other paid feature, the transaction is processed by Apple through the App Store. We receive limited records such as subscription status, renewal dates, and transaction identifiers. We never receive or store your full payment-card number.
2.4 Information we do not collect automatically
Rxact does not automatically collect analytics, crash reports, usage telemetry, or advertising identifiers, and it does not build advertising profiles or use device location to track you. Because the App runs on your device and we operate no servers that receive your data, no usage or diagnostic information is transmitted to us.
2.5 Information we do not collect
- We do not collect or access your contacts.
- We access your camera, photos, or files only when you choose to add a profile or medication picture, and only after your device asks your permission. These images stay on your device with the rest of your data.
- We do not use your microphone or your location. (Your device's own accessibility settings, such as Apple's, may use the microphone independently of Rxact.)
- We do not require your real name, address, or government identifiers.
How we use your information
We use information only for the purposes below:
- To run the App. Showing each person's medications, sending dose and refill reminders, tracking supply, and generating the doctor-ready lists and logs you ask for — all on your device.
- To keep your data current across your devices (if you enable iCloud). Your private iCloud account, provided by Apple, syncs your data between your own devices. We are not involved in and have no access to that sync.
- To support you. Responding to your questions and troubleshooting problems you report, using only the information you choose to share with us when you contact us.
- To keep the App secure. Relying on your device's protections to guard the data stored on it.
- To meet legal obligations. Complying with applicable laws and valid legal requests.
We do not use your medication or family information to advertise to you, and we do not use it to make automated decisions that produce legal or similarly significant effects about you.
Where your information is stored
Rxact is built around on-device storage. The medication and family information you enter is held in the App's local database on your device.
- On your device. Your data stays on your device and is protected by your device's own security, such as your passcode or biometric lock. This is the only place Rxact itself stores your information.
- In your iCloud (optional). If you turn on iCloud, Apple stores an encrypted copy in your personal iCloud account so it can appear on your other devices. That copy is governed by Apple's iCloud terms and privacy policy, and it is associated with your Apple account — not ours. We do not operate any server, account, or backup of our own that receives your information.
How we share information — and how we don't
We do not sell your personal information, and we do not share it for advertising or marketing. We share information only in the limited circumstances below.
| Who | What they receive | Why |
|---|---|---|
| People you choose | A medication list or log you export or share | Only when you actively share it — e.g., with a doctor, pharmacist, or family member |
| Apple | Purchase and subscription records; the iCloud copy you enable | To process payments and provide the device sync you turn on, under Apple's terms |
| Authorities | Only information we actually hold, if required by valid legal process | Only when legally compelled, and narrowly. Because your data stays on your device, we typically have nothing to produce |
We operate no servers and use no service providers that receive your medication or family information, so there is no such data for us to share. When you export and share a medication list yourself, the people or services you send it to handle it under their own practices, which we do not control.
Children's information
Rxact is intended for use by adults (18+) who manage medications for themselves and their families. The App is not directed to children, and is not designed for independent use by children.
Caregivers may, of course, record medications for a child they care for. When you do, the child's information is entered and controlled by you, the responsible adult. We recommend using only a first name, initials, or nickname rather than full identifying details. We use this information solely to provide the medication-tracking features you request, never to contact or build a profile about a child.
How we protect your information
Security is foundational to Rxact, not an add-on. Our safeguards include:
- On-device encryption of your medication and family information, protected by your device's passcode and biometric locks.
- For the optional iCloud copy, the encryption Apple applies to data in your iCloud account, governed by Apple's terms.
- Data minimization by design — because we operate no servers, we hold and retain no copy of your information ourselves.
No method of storage is perfectly secure, and your information's safety depends largely on your device's security. Because we operate no servers and hold no copy of your data, there is no Rxact system that could suffer a breach of your information. A compromise of your own device is a security event involving your device, which we have no way to detect or notify you about.
How long we keep information
Data you enter remains available as long as you keep it in the App. Because the information lives on your device (and, if you enable it, your personal iCloud copy), you control its lifespan:
- Delete any person, medication, or record at any time inside the App.
- Use the "Delete All Data" button in the App's Settings to erase all of your information from your device at once.
- Delete the App to remove its data from your device.
- If you enabled iCloud, remove the iCloud copy through your Apple account settings. Because we hold no copy of your data, there is nothing on our side for us to delete.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain uses. Because Rxact stores your data on your device and does not sell or share it for advertising, you can exercise most of these rights directly in the App at any time.
9.1 U.S. state privacy laws
Residents of California, Washington, and other states with consumer-privacy or consumer-health-data laws (such as the California Consumer Privacy Act and Washington's My Health My Data Act) have specific rights regarding their data, including health data. We honor these rights for all users regardless of location. We do not sell personal information or share it for cross-context behavioral advertising, so there is no such activity to opt out of. For Washington consumers, we maintain a separate Consumer Health Data Privacy Policy required by the My Health My Data Act, which describes how we handle consumer health data and the rights available to you.
9.2 Users outside the United States
The Service is operated from the United States and is intended solely for U.S. users. Grenada Digital does not offer, direct, or market the Service to residents of the European Economic Area, the United Kingdom, or any other jurisdiction outside the United States. The Service is not supported for use outside the United States.
If you access the Service from outside the United States, you do so entirely on your own initiative and without Grenada Digital's support or authorization. Because Rxact runs on your device, your information stays on your own device wherever you are located; it is not transferred to or processed by Grenada Digital. By using the Service, you agree that: (a) Grenada Digital bears no responsibility for your use of the Service or for any consequences of that use; and (b) Grenada Digital makes no representations that the Service complies with the laws of your jurisdiction. You are solely responsible for ensuring that your use complies with any applicable local laws.
Grenada Digital is not obligated to respond to data-subject requests or other privacy inquiries that arise under the laws of jurisdictions outside the United States. If you believe that the privacy laws of the European Economic Area, the United Kingdom, or any other non-U.S. jurisdiction apply to your use of the Service, please do not use the Service.
9.3 How to exercise your rights
You can manage and delete data directly in the App. For any request you cannot complete yourself, contact us using the details in Section 12. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.
Third-party services
Rxact relies on Apple — for the App Store, payments, and, if you enable it, iCloud storage. Apple's handling of information is governed by Apple's own privacy policy. Rxact does not use hosting, analytics, crash-reporting, or other data service providers, and it does not draw information from outside sources.
Changes to this policy
We may update this Privacy Policy as the App evolves or as laws change. When we make material changes, we will update the "Last updated" date above and notify you within the App or by email before the changes take effect, where required. Your continued use of the Service after an update means you accept the revised policy.
Contact us
If you have questions about this policy or your information, or you wish to make a privacy request, please reach out:
Grenada Digital LLC
Texas, United States
Email privacy@grenada-digital.com
Web rxact.io