Last Updated: August 20, 2026
Effective Date: August 20, 2026
1. Introduction & Overview
Welcome to RxPad ("we", "our", or the "App"). RxPad is a specialized digital prescription writing and patient management application designed for certified medical doctors, physicians, dentists, and other healthcare providers.
We recognize the essential importance of doctor-patient confidentiality and Protected Health Information (PHI). RxPad is engineered with a local-first privacy architecture: your patient records, prescription histories, doctor credentials, and digital signatures are encrypted and stored locally on your device.
This Privacy Policy explains how data is handled, processed, stored, and safeguarded when using RxPad.
2. Information Handled by the App
A. Practitioner Profile & Clinic Details
Information Handled: Doctor's name, medical registration/license numbers, qualifications, clinic/hospital addresses, contact numbers, email addresses, custom prescription headers/footers, and digital signature vector data.
Storage & Processing: This information is stored locally in your device's encrypted database using Android KeyStore and AES-256 GCM encryption. It is used solely to generate prescription PDFs, printouts, and digital headers.
B. Patient Records & Clinical Prescriptions
Information Handled: Patient demographic details such as name, age, gender, weight, contact information, clinical diagnoses, vitals, allergies, chief complaints, medication lists, dosages, and prescription history.
Storage & Processing: Patient records and prescription data are stored strictly on your local device. RxPad does not transmit, aggregate, or store your patient charts on external company servers.
C. In-App Purchases & Licensing
Data Processed: Purchase verification tokens and order status for RxPad Pro Lifetime.
Processing: In-app purchases are managed exclusively through Google Play Billing. RxPad does not collect or store credit card, bank, or payment account numbers. All financial transactions are subject to Google's applicable terms and privacy policies.
D. App Analytics & Installation Attribution
RxPad may use the Meta/Facebook SDK for app installation attribution, operational analytics, and advertising campaign measurement.
Data Collected: App install events, app launches, anonymous device identifiers such as the Android Advertising ID (GAID), operating system version, and general aggregated in-app milestones such as license purchase completion.
Purpose: This information is used to measure installation attribution, evaluate marketing and advertising campaign effectiveness, and understand general app usage trends.
Health Data Protection: RxPad does not intentionally share or transmit Protected Health Information (PHI), patient charts, diagnoses, drug names, or prescription contents to Meta/Facebook. Only high-level operational events are tracked.
3. Permissions Used by RxPad
Permission Purpose
android.permission.INTERNET Required for Google Play license checks and Meta app installation attribution.
com.android.vending.BILLING Required to process in-app purchases and restore the RxPad Pro license through Google Play.
androidx.core.content.FileProvider. Used to generate and securely share prescription PDF files with other installed apps, such as WhatsApp, Email, and Print, without requiring broad storage access.
4. Third-Party Service Providers
RxPad integrates the following third-party services:
Google Play Services & Google Play Billing: Used for in-app purchase verification and license management.
Meta (Facebook) App Events SDK: Used for anonymous app launch analytics, installation attribution, and advertising campaign measurement.
Third-party services process information according to their respective privacy policies and terms.
5. Security & Data Storage Architecture
Hardware-Backed Encryption: Local databases utilize Android KeyStore cryptographic keys and AES-256 GCM encryption.
No Unauthorized Cloud Upload: RxPad does not automatically ingest, upload, or synchronize your local database to remote RxPad servers.
Secure Document Sharing: Exported prescription PDFs are mediated through Android FileProvider using scoped, temporary, read-only permissions.
6. User Control, Data Retention & Deletion
Full Practitioner Control: Because clinical and patient data resides locally on your device, you control the retention of that information.
Deletion: You can edit or permanently delete patients, prescriptions, medications, and doctor profiles directly within the App.
Complete Removal: Clearing app storage through Android Settings or uninstalling the App permanently removes the locally stored encrypted database from your device, subject to Android's system behavior and any copies you may have independently created or shared.
7. Opting Out of Ad Tracking & Advertising ID
You can reset or disable your Android Advertising ID through your device settings.
Typical steps include:
Open Settings on your Android device.
Navigate to Google > All services (where applicable).
Select Ads.
Choose Delete advertising ID or Reset advertising ID, depending on your Android version.
The exact settings and terminology may vary by device manufacturer and Android version.
8. Children's Privacy
RxPad is a professional clinical tool intended for licensed healthcare practitioners. While healthcare providers may document pediatric patient prescriptions locally on their device, RxPad does not knowingly collect personal information directly from children under 13, or under 16 where applicable under local law.
9. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to the App, our data practices, or applicable legal and regulatory requirements.
Any revisions will be reflected by updating the Last Updated and Effective Date displayed at the beginning of this Privacy Policy.
10. Contact Us
For questions, concerns, or requests regarding this Privacy Policy:
Support Email: support.rxpad@gmail.com