Next-Rx

Next-Rx Privacy Policy

Effective 23 September 2026 Next-Rx reminds you when a medication dose is due. This policy describes what the app collects, where it goes, and what it never does.

The short version

Your medication data never leaves your phone. The only thing Next-Rx sends anywhere is your email address, and only so you can sign in.

What is stored on your device

The following is kept in a database on your phone and is **never transmitted to us or to anyone else**:

• Medication names and dosage notes you enter
• How often each medication is taken, and when you last took it
• Your history of doses marked as taken or skipped
• Your scheduled reminders

This information is health-related, which is why it stays on the device. Keeping it there is a deliberate and settled choice, not a limitation we intend to lift: we do not plan to add cloud backup or sync for your medication data. It is removed when you uninstall the app. We cannot read it, recover it, or restore it if the phone is lost.

What leaves your device

Your email address, and crash reports. Next-Rx has no passwords. You enter an email address and we send a one-time sign-in link. To do that, your address is handled by:

• Supabase — creates your account, issues the sign-in link, and keeps the

session that stays signed in. supabase.com/privacy

• Resend — delivers the sign-in email. resend.com/legal/privacy-policy

Both act as processors on our behalf. Your email address is used to identify your account and to send sign-in links. It is not used for marketing, and it is not sold, rented, or shared with anyone else. Your sign-in session is stored in your device's secure storage — the Android Keystore or the iOS Keychain.

Crash reports

If the app fails, it sends a diagnostic report so the fault can be found and fixed. These reports are handled by Sentry as a processor on our behalf. sentry.io/privacy A report contains the technical detail of the failure — the error, where in the code it happened, your device model and operating system version — and a random identifier for your installation, so that twenty reports from one phone can be told apart from twenty phones. Reports never contain your medication data. Medication names, dosages, schedules and dose history are removed before a report leaves your device, along with your email address. This is enforced in code rather than by convention, and tested. Reports contain no advertising identifier, no location, and nothing about how you use the app — only failures.

What Next-Rx does not do

• No advertising, and no advertising identifiers
• No analytics or usage tracking — diagnostics are only sent when something

breaks, never to record what you do

• No location, contacts, or microphone access. The camera and photo library are used only when you choose to scan a pharmacy label — see below
• No selling or sharing of personal information
• No profiling or automated decision-making

Scanning a label

You can fill in a medication by pointing the camera at its pharmacy label, or by choosing a photo of one. The text is read on your phone — by Google ML Kit on Android and by Apple's Vision framework on iOS, both of which run entirely on the device — and turned into a suggestion in the form for you to check. The photo is deleted as soon as it has been read; it is not stored, and neither the photo nor the text read from it is sent anywhere. Camera and photo permissions are asked for only when you tap Scan, and you can decline them and type the details instead.

Notifications

Reminders are scheduled with your device's own operating system and are delivered by it, not by a server. They work with no network connection, and the content of a reminder never leaves the phone. To deliver reminders on time the app asks for permission to post notifications, to schedule exact alarms, to re-arm reminders after a restart, and — optionally — to be exempt from battery optimisation. You can decline or revoke any of these in system settings, though reminders may be delayed or stop arriving.

Your choices

• Stop reminders: remove a medication in the app, or revoke notification

permission in system settings.

• Delete your medication data: uninstall the app. It is on your device only.
• Delete your account: in the app, open the menu and tap Delete account.

That removes your account and email address from our authentication provider and erases everything stored on the phone. Details: next-rx.com/account-deletion

• Access a copy of your data: the only personal data we hold is your email

address; write to us and we will confirm what is stored.

Children

Next-Rx is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

If this policy changes, the effective date above changes with it, and a notice appears in the app if the change is material.

Contact

Questions, deletion requests, or anything else: catherine@next-rx.com