Security & Privacy

RxFolio Privacy Policy

Effective date: 22 August 2026 · Last updated: 16 September 2026 · Version 1.1
Operator: RRCH Labs · Android application ID: com.rrch_labs.rx_folio
Privacy contact: privacy@rxfolio.org

RxFolio (“RxFolio”, “we”, “us”, or “our”) provides a personal health-management application that helps you organize medications, medication schedules, health information, medical documents, symptoms, conditions, procedures, allergies, vitals, and related information.

This Privacy Policy explains how RxFolio collects, uses, stores, protects, shares, and deletes personal information when you use the RxFolio mobile application, progressive web application, this website, and related services (collectively, the “Service”).

Because RxFolio may process highly sensitive health-related information, we have written this policy to describe the product as it is actually implemented, not only in general terms. By using RxFolio you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for particular processing activities, we obtain that consent separately through the application.

1. Who we are

The RxFolio Service is operated by:

For the personal data we determine the purposes and means of processing, RRCH Labs acts as the Data Fiduciary (data controller). Our cloud, identity, model, and payment providers act as Data Processors on our behalf, or as independent controllers where they process data under their own terms (for example, your Google or Microsoft account).

For privacy-related questions, requests, complaints, or data-rights requests, contact privacy@rxfolio.org. See section 27 for grievance escalation.

2. Scope of this policy

This Privacy Policy applies to:

• The RxFolio mobile, desktop, and progressive web application clients;
• The RxFolio API, the database we operate, and related backend systems that store health data;
• This website at rxfolio.org, including the account-deletion page;
• Optional document storage in your own Google Drive or Microsoft OneDrive;
• Visit-preparation reports that you ask the Service to generate;
• Guest-access windows you create so a clinic can view a profile with a phone number and PIN.

It does not govern the independent privacy practices of Google, Microsoft, Apple, or payment processors. Their own policies apply when you use their sign-in services, app stores, or storage.

3. Account and authentication information

RxFolio requires sign-in with Google and/or Microsoft, depending on the platform and configuration. From your chosen identity provider we typically receive:

• Name or display name;
• Email address;
• Authentication-provider user identifier;
• Profile photo URL, if the provider supplies one;
• Tokens needed to keep you signed in and, if you connect cloud storage, to access the folder you authorize;
• Account creation, login, and security-related information.

Your subscriber record and plan entitlements are keyed to a user identifier derived from your authentication provider, not to your email address; the email address is stored alongside it so we can contact you and so a caregiver can be invited by email. We do not require a phone number for Google or Microsoft account identity. If you create a guest-access window, we store the clinic phone number you enter so that the guest can redeem the PIN. RxFolio never receives or stores your Google or Microsoft password.

4. Health and medical information

RxFolio is designed so that you can store and manage health-related information that you choose to provide. Depending on the features you use, this may include:

Medications

• Medication name, strength, dosage, and route of administration;
• Frequency, schedules, start and end dates, and reminders;
• Prescription-related information and medication history;
• Adherence or intake records, and notes relating to medications;
• Images of medication labels that you choose to attach to a medication record (stored as photos, not read or analysed for text).

Health measurements and history

• Blood pressure, blood glucose, heart rate, weight, temperature, oxygen saturation, and other vitals;
• Symptoms, moods, and observations;
• Conditions, allergies, procedures, surgeries, and diagnoses recorded by you;
• Medical history and treatment information;
• Healthcare-provider and hospital-visit information;
• Medicine inventory and personal health notes.

Medical documents

• Prescriptions and laboratory reports;
• Imaging reports and discharge summaries;
• Medical bills and insurance details;
• Consultation records, procedure reports, and hospital identifiers;
• Other healthcare documents you add.

Profiles for other people

RxFolio supports profiles for people you manage as a caregiver, such as a parent, child, or dependent. If you record another person’s health information, you are responsible for having the authority or legal basis to do so, and that person’s information is treated as health information under this policy.

5. Documents in Google Drive or OneDrive

If you connect Google Drive or Microsoft OneDrive, RxFolio requests only the permissions reasonably necessary for the functionality you select. Depending on the feature, this may include permission to:

• Identify your connected storage account;
• Locate documents you choose to make available to RxFolio;
• Upload, retrieve, organize, or delete the document files you store through RxFolio;
• Create or update the RxFolio folders that hold them.

When you choose to view a document, RxFolio retrieves the file solely to display or download it in the app; it does not inspect, scan, or interpret the contents. RxFolio performs no optical character recognition and no automated extraction of information from your documents. See section 6.

Where the platform supports it, RxFolio uses narrowly scoped permissions rather than the broadest available access. For Google Drive this is typically drive.file, which limits access to files the application creates or that you explicitly select. For Microsoft OneDrive, sign-in requests only User.Read, and storage access is requested separately as Files.ReadWrite, which covers your own OneDrive files; RxFolio does not request Files.ReadWrite.All. Microsoft’s narrower app-folder scope is not used because it cannot reach folders shared between family members and is unavailable on work and school accounts, so it would break caregiver access.

RxFolio does not access unrelated files in your connected cloud-storage account merely because you have connected the account. Everything RxFolio writes is placed under a RxFolio/ folder in your own account:

• Documents are filed under RxFolio/Profiles/<profile id>/Records/ in folders by document type, with one folder per care profile so that records for different people do not mix. The profile id is an opaque identifier generated by RxFolio; your email address and the patient’s name are not used in folder or file names.
• Documents are written in their original PDF or image format, so you can open them in Drive or OneDrive without RxFolio. RxFolio does not apply an additional application-level encryption layer to these files.

Your medical documents are the only thing RxFolio writes to your cloud-storage account. RxFolio does not place its database backups there.

Because RxFolio adds no encryption layer of its own to these files, their protection is provided by your cloud-storage provider’s encryption at rest and in transit, and by the security of your Google or Microsoft account. Protect that account accordingly, and prefer two-step verification.

6. Information recorded against documents

When you attach a document, RxFolio stores the fields you record against it — medication names, dosages, frequencies, prescription dates, healthcare-provider information, measurement values, and other relevant medical information. These fields are entered by you, not derived from the document by us.

Information recorded against a document and stored in your RxFolio account is treated as your health information and is subject to this Privacy Policy. Because it is typed in by hand it may be incomplete or inaccurate; see section 31.

RxFolio does not sell your medical information.

7. Information on our servers

When you use the Service, our systems process:

• Subscriber and entitlement records — email address, authentication provider, plan tier, subscription status, and billing identifiers needed to unlock features. For app-store purchases this includes the product identifier, order identifiers, and hashed purchase tokens used to verify and renew entitlements. We do not store full payment-card or UPI credentials; those remain with the app store or your bank.
• Structured clinical data — the health rows described in section 4, stored in our database as the authoritative record, together with synchronization checkpoints and row versions.
• Document references — metadata pointers recording that a document exists, its type, and where it is filed in your own cloud-storage account. In this release RxFolio does not hold copies of your document files on its servers; the files themselves reside in your connected Google Drive or OneDrive account, or on your device if you have not connected one.
• Care grants — invitations and permissions created when you share a profile with a caregiver, family member, or clinician.
• Guest share sessions — when you create a clinic PIN window we store the clinic phone number (encrypted), a hash of the PIN, expiry, revoke state, profile, and purpose. The PIN is shown once and is not stored in recoverable form.
• Care-access audit events — records of who accessed which profile, containing identifiers and timestamps only, not clinical content.
• Usage counters — feature request counters used to apply plan limits and prevent abuse.
• Visit-preparation report content — when you ask for a report, the records you selected and the generated summary, processed as described in section 12.

User preferences and application settings are also stored so that your configuration follows you between devices.

8. Information collected automatically

When you use RxFolio, certain technical information may be generated or collected:

• Device type, operating system, and application version;
• Browser information when you use the web application or this website;
• IP address, and approximate location derived from it where necessary for security or technical routing;
• Login timestamps and session information;
• Locale, timezone, and accessibility settings needed for reminders and formatting;
• Connectivity state used to decide whether clinical features are available;
• Crash and diagnostic information, where a crash-reporting tool is enabled in a given build;
• Security and audit logs.

We use this information to operate, secure, troubleshoot, and improve the Service. We do not use technical information to infer sensitive medical characteristics for advertising purposes, and we do not place health data into analytics events, crash reports, query strings, URLs, notification payloads, or ordinary application logs.

9. How we use your information

We use your information to:

1. Create and maintain your RxFolio account;
2. Authenticate you securely and maintain your session;
3. Store, organize, and synchronize your health information;
4. Provide medication tracking, schedules, and reminders;
5. Maintain medication and health history;
6. Help you organize medical records and documents;
7. Provide health-information summaries, trends, and reports that you request;
8. Generate visit-preparation reports that you choose to share with a healthcare professional;
9. Store, file, and return the documents you specifically make available to RxFolio;
10. Enable care sharing with people you invite;
11. Enable guest-access PIN windows you create for a clinic visit;
12. Apply the correct plan entitlements and operate subscriptions;
13. Provide customer support and respond to your requests;
14. Maintain security and prevent fraud, abuse, and unauthorized access;
15. Diagnose technical problems and improve reliability;
16. Comply with applicable law, regulation, legal process, or lawful governmental requests;
17. Protect the rights, safety, and security of RxFolio, our users, and others.

We will not use your health information for purposes incompatible with those described here without obtaining any consent required by applicable law.

10. Lawful basis and consent

Where Indian law applies, we process your digital personal data on the basis of the consent you provide through the notice presented in the application, or for the limited legitimate uses permitted by law. The application presents a privacy notice describing the categories of data processed and the purposes of processing, and records your consent together with the notice version and timestamp.

You may withdraw consent at any time. Withdrawal applies to future processing and does not affect the lawfulness of processing already carried out. Because health-record storage is the core purpose of RxFolio, withdrawing consent for that processing generally means you should also delete your account; the application and this website both provide that option. Where you withdraw consent for an optional feature only, such as cloud document storage or visit-preparation reports, that feature stops while the rest of your account continues to work.

Where we rely on consent, we also stop the corresponding processing by our processors within a reasonable period after you withdraw it.

11. What we do not do with health information

Unless expressly described in this policy or separately authorized by you, RxFolio does not:

• Sell your personal health information, medical records, prescriptions, or medication history;
• Use your health information to serve advertising targeted on the basis of your health conditions;
• Provide your health information to data brokers;
• Use your health information to determine creditworthiness;
• Use your health information to determine insurance eligibility;
• Allow advertisers to access your individual health records;
• Perform behavioural tracking or profiling of your health activity for marketing.

RxFolio does not include advertising SDKs. If we ever introduce a materially different use of health information, we will update this policy and obtain any additional consent required by law before that use begins.

12. Automated generation of visit-preparation reports

When you ask RxFolio to generate a visit-preparation report, the application sends the records you selected for that report — the date range, medicines, symptoms, conditions, allergies, procedures, vitals, care-team entries, and the titles and types of relevant documents — to the RxFolio API, which drafts the summary wording using a language model and returns it to you.

• Document contents are never sent. Only the fact that a document of a given type exists is included; the file itself is never opened, uploaded to the model, or read.
• Patient and clinician names are not sent. The text submitted to the model excludes the profile name, doctor names, and care-team entries. The patient name is added to the report title only on your device after generation, before the PDF is saved.
• Generation runs on our API rather than on your device, so model credentials remain server-side and we can apply rate limits and standard safety wording.
• In our current production deployment the model is self-hosted on infrastructure we operate, and the content is not passed to an outside model vendor. The third-party model providers the software can be configured to use are disabled by default. If we ever change this, we will update this policy and identify the provider and its processing location before the change takes effect; you can also ask us at any time which model is in use.
• Report content is processed transiently for the duration of the request. We do not retain the submitted text as a prompt log or training corpus. What persists is the report you keep, stored as your health information under this policy; if you export it to your own cloud storage it is written to RxFolio/Profiles/<profile id>/Records/Visit_Preps/ in your account.
• Generated output is informational and educational only and is not medical advice, diagnosis, or dosing authority. It can be incomplete or wrong — see Medical Disclaimer and section 31.
• We keep request counters for rate limiting and abuse prevention.

The feature is optional. If you would rather no health content be processed this way, do not generate visit-preparation reports; the rest of the Service works without them. If generation is unavailable, RxFolio falls back to a plain structured summary assembled without a model. RxFolio does not use your health information to train models.

13. Sharing of information

We disclose personal information only in the following limited circumstances:

Service providers

To vendors and contractors who help operate the Service, under contract and only as needed.

Identity providers

Google and Microsoft, for sign-in and, where you authorize it, storage access.

Summarization model provider

Only where a deployment is configured to use a third-party model rather than our self-hosted one, and only for a visit-preparation report you request, as described in section 12.

App stores and payment processors

To verify and manage subscriptions.

People you invite

Caregivers, family members, or clinicians you grant access to, and clinic guests during a live PIN window, as described in section 14.

Legal requirements

Where disclosure is required by applicable law, regulation, court order, subpoena, or other valid legal process.

Security and safety

Where reasonably necessary to investigate fraud, abuse, security incidents, or threats to the safety of users or others.

Corporate transactions

If RxFolio or substantially all of its assets are involved in a merger, acquisition, restructuring, financing, or sale, information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards. We will notify you of any change in the identity of the Data Fiduciary.

At your direction

When you explicitly instruct RxFolio to share information, such as generating and sending a visit-preparation report.

We do not otherwise disclose your individual health information to third parties for their own independent marketing purposes.

14. Sharing with caregivers and clinicians

RxFolio includes care-sharing features that let you invite another person to view or contribute to a profile you own. When you create such an invitation, the invited person’s email address is recorded, and once they accept, they can access the health information covered by the permissions you granted. You can change or revoke those permissions at any time, and access events are recorded in an audit trail.

RxFolio may also let you generate a report containing selected health information to share outside the application. You control whether and with whom you share it. Once you provide a report to a doctor, hospital, caregiver, family member, or other third party, that recipient processes the information according to its own policies and legal obligations, and RxFolio cannot control how it is used after you intentionally share it.

Guest access (clinic PIN)

On a paid plan, an owner or caregiver can create a time-boxed, read-only window for a clinic visit. You choose a duration (from 15 minutes to one day), enter the clinic phone number, and RxFolio shows a six-digit PIN once. The guest does not create a RxFolio account: they enter that phone number and PIN in the app or web share flow. Access lasts until the window expires or you revoke it. Guests cannot add, edit, or delete records.

Guest access is not Care sharing. The clinic phone is stored so we can match a redeem attempt to the window you created; the PIN is stored only as a hash. Share-log entries keep a masked phone, purpose, and whether the window expired or was revoked. Opening a guest window is a disclosure of health information to whoever has the phone number and PIN until you revoke it.

15. Service providers and subprocessors

We use carefully selected service providers to operate the Service, including providers for cloud infrastructure and database hosting, authentication, error and security monitoring, report summarization, payment and subscription verification, and backup and disaster recovery. Medication reminders in the current release are scheduled locally on your device and do not use a third-party push transport.

Such providers may process personal information only as reasonably necessary to provide services to RxFolio, subject to appropriate contractual, technical, and organizational safeguards. We do not authorize service providers to independently sell your health information.

A current description of material third-party processors is published at Data Processing & Subprocessors.

16. Google services

If you sign in with Google or connect Google Drive, Google processes information according to Google’s own terms and privacy policies. RxFolio requests access to Google data only for functionality that requires it, and RxFolio’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can review or revoke RxFolio’s access in your Google Account permissions settings.

17. Microsoft services

If you sign in with a Microsoft account or connect OneDrive, Microsoft processes information according to Microsoft’s own terms and privacy statements. RxFolio requests only the permissions necessary for the functionality you choose to use, and you can revoke them through your Microsoft account settings.

18. Data storage and location

Structured health information entered into RxFolio is stored in a cloud-hosted database we operate, or that our infrastructure providers operate on our behalf. Health information is encrypted in transit using industry-standard transport encryption (HTTPS/TLS), and at rest using encryption mechanisms provided by our infrastructure and database providers. Where appropriate we apply additional application-level controls.

Authentication tokens and secrets are stored separately from ordinary health records, using platform secure storage on your device. RxFolio does not store plaintext passwords, because authentication is delegated to Google or Microsoft.

Document files written to your own Drive or OneDrive keep their original format, without an additional RxFolio encryption layer, so that you can open them without RxFolio. Their protection therefore comes from your cloud provider’s encryption and your cloud account’s own security. RxFolio does not write its database backups to your cloud account; our backups are held on infrastructure we control.

19. Data security

We use reasonable technical and organizational measures designed to protect your information against unauthorized access, unauthorized disclosure, accidental loss, destruction, alteration, and misuse. These measures include encryption in transit and at rest, access and authentication controls, role-based administrative access, least-privilege permissions, secure credential management, logging and monitoring, backup controls, vulnerability management, and incident-response procedures.

Further detail is published at Security.

No internet-connected system can be guaranteed to be completely secure. While we take security seriously, we cannot guarantee that unauthorized persons will never circumvent our security measures. Please also protect your device lock screen and your Google or Microsoft account.

20. Data minimization

RxFolio is designed around collecting and processing only information reasonably necessary to provide the functionality you request. We do not require you to provide information that is unnecessary for the feature you wish to use. Certain optional information may improve the usefulness of the Service but is not required to maintain a basic account. Application permissions, such as camera access to capture a document or label photo, are requested at the point you activate the feature rather than at startup.

21. Cookies and similar technologies

This website uses only what is necessary to make the pages and the account-deletion flow work. It sets no advertising or analytics cookies. The account-deletion page uses browser session storage and cookies set by Google or Microsoft during sign-in, which are required for the authentication itself. Full detail is published at Cookie Policy.

The RxFolio application may use device-level storage serving equivalent purposes, such as keeping you signed in and remembering preferences.

22. Data retention

We retain personal information only for as long as reasonably necessary to:

• Provide the Service and maintain your account;
• Preserve the information you have chosen to store;
• Comply with legal obligations;
• Resolve disputes and enforce agreements;
• Maintain security and audit records; or
• Protect our legitimate interests where permitted by applicable law.

When information is no longer required, we delete it, anonymize it, or securely dispose of it in accordance with our retention procedures and applicable law. Backup copies may persist for a limited period after deletion while backup systems rotate or are securely overwritten. Specific periods are published at Data Retention & Deletion.

23. Account and data deletion

You may request deletion of your RxFolio account and associated personal data:

• In the application: Settings → Account → Delete account & data;
• On this website: https://rxfolio.org/delete-account, after signing in with the same account you use in the app;
• By email: privacy@rxfolio.org, where we may need to verify your identity before acting.

When your account is deleted, we delete or anonymize the personal information associated with it, including your subscriber record, structured clinical data, the document references we hold, care grants you created or accepted, preferences, and usage counters. Deletion is subject to legal retention requirements, security and fraud-prevention needs, legitimate dispute-resolution requirements, and technical backup-retention periods.

Full detail, including what is retained and for how long, is published at Data Retention & Deletion.

24. Revoking Drive or OneDrive access

You can revoke RxFolio’s authorization to access your connected Google or Microsoft account through that provider’s account settings. After access is revoked, RxFolio can no longer reach the connected resources unless you authorize access again. Revoking authorization does not by itself delete information already stored in your RxFolio account, and it does not delete the files already in your storage account.

25. Your privacy rights

Depending on your location and applicable law, you may have rights relating to your personal data, including the right to:

• Know what personal information is processed, and why;
• Request access to your personal information and a summary of processing;
• Request correction of inaccurate, misleading, or incomplete information;
• Request completion or updating of your information;
• Request erasure of personal information;
• Withdraw consent where processing is based on consent;
• Obtain certain information in a portable format where legally required;
• Nominate another individual to exercise your rights in the event of death or incapacity, where provided under Indian law;
• Raise a grievance with us and, where applicable, with the competent authority.

Many of these rights can be exercised directly in the application: you can view and edit your records, export an account data file, and delete your account. For anything else, use Privacy Request or write to privacy@rxfolio.org.

We may need to verify your identity before fulfilling certain requests, and we may decline requests where the law permits or requires us to do so.

Response times. We answer each request within the period required by the law applicable to that request and to you; different request types and different jurisdictions carry different deadlines, so we do not apply a single universal period. Independently of that, our internal service target is to acknowledge a request within 3 business days and to resolve it within 30 days. If a request is complex or we need more time, we will tell you why and give you a revised date before the original period expires.

26. India — Digital Personal Data Protection

Where applicable, RxFolio processes digital personal data in accordance with Indian data-protection requirements, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as applicable and as amended from time to time.

In particular:

• We identify ourselves as the Data Fiduciary and publish a contact for data-protection matters;
• We present a clear notice describing the personal data processed and the purposes of processing, and we obtain consent where required;
• We record the notice version and the time of consent, and we support withdrawal of consent;
• We provide mechanisms for access, correction, completion, updating, and erasure;
• We provide a grievance-redressal mechanism with a defined response period;
• We support nomination of another individual to exercise your rights where the law provides for it;
• We apply reasonable security safeguards and maintain the logs required to detect and investigate unauthorized access;
• We treat data of children and persons with a lawful guardian in accordance with section 29.

You are expected to provide accurate information and not to impersonate another person when exercising your rights or creating an account.

27. Grievance redressal

If you are not satisfied with how we have handled your personal data or a privacy request, you may escalate it to our designated contact:

We acknowledge grievances promptly and resolve them within the period prescribed by applicable law, which for grievances covered by Indian data-protection law is the period specified under the Digital Personal Data Protection Act, 2023 and the rules made under it. Our internal target is to acknowledge within 3 business days and to resolve within 30 days. If you remain dissatisfied, you may approach the competent data-protection authority or another forum available to you under applicable law.

28. International data transfers

Depending on the location of our infrastructure and service providers, your information may be processed in countries other than the one in which you reside. Where required by applicable law, we implement appropriate safeguards for international transfers, and we do not transfer personal data to any territory restricted by the Government of India for such transfers.

By using the Service you acknowledge that cloud-based services may involve international processing, subject to applicable legal requirements.

29. Children’s privacy

RxFolio is intended for adults managing their own health information, or acting as a caregiver for someone else.

Under Indian law, a child is an individual who has not completed eighteen (18) years of age. RxFolio does not knowingly process a child’s personal data without verifiable consent from a parent or lawful guardian, and does not undertake tracking, behavioural monitoring, or targeted advertising directed at children. Where a person has a lawful guardian, we treat the guardian’s consent in the same manner.

A parent, guardian, or caregiver may create and manage a profile for a child within their own RxFolio account. In that case the account holder is responsible for having the authority to record that information.

If you believe a child has provided personal information to RxFolio without appropriate authorization, contact privacy@rxfolio.org and we will take appropriate action.

30. Medical disclaimer

RxFolio is a personal health-information management and medication-tracking tool. RxFolio is not a doctor, hospital, pharmacist, emergency service, healthcare professional, or medical device, and does not provide medical diagnosis or treatment.

Medication reminders are organizational aids only. Do not rely on RxFolio for emergency medical decisions. If you believe you are experiencing a medical emergency, contact your local emergency medical service or seek immediate professional medical attention. The full text is published at Medical Disclaimer.

31. Accuracy of health information

RxFolio provides tools for recording and organizing information. We do not guarantee that:

• Information entered by a user is accurate;
• Information recorded against a stored document matches that document;
• Medication information is complete;
• Reminders or notifications will always be delivered or displayed;
• Reports contain every relevant piece of health information;
• Third-party cloud services will always be available; or
• The Service will always be available without interruption.

Verify important medical information against the original prescription, report, medical record, or with your healthcare professional.

32. Security incidents and breach notification

If we become aware of a personal-data breach, we investigate and take appropriate containment, remediation, and notification measures in accordance with applicable law. Where legally required, we notify affected users and the competent authority within the applicable timeframe. Our internal process covers detection, classification, containment, investigation, impact assessment, notification, remediation, and post-incident review.

33. Changes to this policy

We may update this Privacy Policy periodically. When we make material changes, we may notify you through the application, this website, email, or other appropriate means, and where the change requires it we will seek renewed consent. The “Last updated” date at the top of this page indicates when it was most recently revised. Continued use after an update means you acknowledge the revised policy, to the extent permitted by law.

34. Contact us

Related pages: Terms & Conditions, Health Data & Permissions, Data Processing & Subprocessors, Data Retention & Deletion, Delete Account, Privacy Request.