Data processing
Patient records stay on your device, so they are not processed by us or by our providers. This page lists the providers involved in the account, subscription and verification services, and what each receives.
Last updated: 14 August 2026
Providers
- Authentication and database
- Stores account data, licence and device records, and the minimal QR-verification details (prescription number, verification code, issue date, doctor name and registration, clinic name, status). Receives no patient details.
- Payment providers
- Process subscription payments. They receive billing identity and payment details, and no patient data.
- App stores
- Google Play and, later, the Apple App Store distribute the mobile apps and may handle in-app purchases under their own terms.
- Transactional email
- Delivers account and billing emails. Receives your email address and message content, which never includes patient information.
- Error tracking
- Receives technical diagnostics with clinical fields stripped before transmission.
Data location
Account and verification data is stored in the region of our database provider, which is published here before launch. Patient records are stored on your own device, so their location is wherever your device is — which also makes it easier to meet rules that keep health data within a country.
Our commitments
- Never ask the apps to send patient records to us without your explicit, separate consent.
- Give at least 30 days’ notice before adding or changing a provider that receives account data.
- Notify you without undue delay after becoming aware of a breach affecting account data.
- Delete or return account data on termination, subject to the verification-details note in the privacy policy.