Privacy policy
Doctor Prescription Maker is built so that your patients’ records live on your own device, not on our servers. This page explains exactly what stays with you, what we keep, and what we never see.
Last updated: 14 August 2026
Who decides what
You — the prescribing clinician or clinic — decide what patient information is entered and why. In data-protection terms you are the controller of that information.
Because patient records are stored on your device and are not sent to us, we do not normally receive or process them. This may change only if you switch on an optional backup or sync feature, which is described below and is not available at the time of writing.
What stays on your device
- Patient and prescription data
- Patient names and details, complaints, diagnoses, prescribed medicines, drafts and every finalized prescription. Stored in an encrypted database on your device; the key is kept in the operating-system secure store.
- Your medicine list and preferences
- The medicines you save with your usual dosing, your template and colour choices, and your clinic logo, signature and stamp images.
- Your licence
- A signed licence token that records your plan and allowance, so the app works offline.
What we keep on our servers
- Account data
- Your name, email address and sign-in credentials (stored hashed), and your professional and clinic details if you choose to save them to your account.
- Subscription and billing
- Your plan, subscription status, invoices and transaction references. Card numbers are handled entirely by the payment provider and never reach our systems.
- Licence and device records
- The devices signed in to your account and how much of your free allowance has been used, so the limit works across devices.
- QR-verification details
- For each finalized prescription, only: the prescription number, verification code, issue date, the doctor’s name and registration, clinic name, and whether it has been revoked or replaced. Never the patient’s name, age, diagnosis or medicines.
- Technical data
- IP address, app version and timestamps, recorded for security events and abuse prevention.
What we never receive
These are design constraints of the apps, not just promises:
- Patient names, details, diagnoses, complaints or prescribed medicines.
- The contents of your prescriptions or the PDFs you create.
- Your database encryption key, which never leaves the device’s secure store.
- Analytics or error reports containing clinical content — diagnostics exclude clinical fields.
- Anything in URLs or QR codes beyond the verification code.
Optional backup and sync (not yet available)
We plan to offer optional encrypted backup and multi-device sync. It will be off by default, require your explicit consent, and be end-to-end encrypted so that we cannot read the contents. This page will be updated, and consent asked, before it is offered.
Your device, your responsibility
Because records are on your device, keeping that device secure is your responsibility: use a screen lock, keep the system updated, and keep an encrypted backup export. Uninstalling the app does not delete your records; deleting the app’s data folder does, and it cannot be undone without a backup.
Sub-processors
We use third parties to run the account and subscription service: an authentication and database provider, payment providers, a transactional email provider, the app stores, and error tracking with clinical fields removed. None of them receives patient records. The current list is on the data processing page.
Retention and deletion
A finalized prescription cannot be deleted inside the app, because a dispensed prescription is a record that must stay verifiable; it can be revoked with a reason or replaced by a correction, and the original is kept. Drafts can be deleted at any time.
You can ask us to delete your account. That removes your sign-in, profile and licence records. Verification details for prescriptions you already issued may be kept for as long as they need to remain verifiable, unless you ask us to remove them, in which case their QR pages will show “not found”. Retention periods for medical records are set by the rules that apply to you; please check them.
Your rights
- Access — ask us for the account data we hold about you; your patient records are already on your device.
- Correction — edit your profile and patient records directly in the app.
- Deletion — request deletion of your account, subject to the retention notes above.
- Portability — save prescriptions as PDF and export your medicine list as CSV; a full encrypted data export is planned.
- Objection and complaint — contact us, and where applicable your local data-protection authority.