Privacy Policy
Scriptify connects pharmacies and physicians so that prescriptions, refill requests, and related communications move quickly and securely. This policy explains, in plain language, what information we handle, why, and what we will never do with it.
The short version
- Patient information belongs to your doctor and your pharmacy — not to us. It passes through Scriptify on their instructions, encrypted, and is automatically deleted from our systems 30 days after it was sent or received.
- Patient information stays in Canada. All storage and processing of patient information, including our AI document reading, happens in Canadian data centres.
- We never sell data. We never use it for advertising. Our AI never trains on it.
- Doctors on Scriptify are identity-verified, licensed professionals, and every prescription or reply they send is confirmed with their device biometrics (Face ID or Touch ID) at the moment of signing.
Who we are under Ontario law
Under Ontario's Personal Health Information Protection Act (PHIPA), your physician and your pharmacy are the health information custodians — the parties legally responsible for patient records. Scriptify acts as their service provider (agent): we transmit, display, and briefly hold information on their behalf and instructions, and we use it for no other purpose. The lasting legal record of any prescription remains in the physician's chart and the pharmacy's dispensing record, exactly as it does today.
What we collect
1. Professional account information (doctors, pharmacists, clinic staff): name, professional licence number and regulatory college, contact details, workplace details (clinic or pharmacy name, address, fax number), sign-in identity (Sign in with Apple or Google), a drawn signature for physicians, and — for physicians — a one-time government-ID identity verification carried out by our verification provider. We keep this while your account is active.
2. Patient health information passing through the platform: the documents professionals send each other (for example, a refill request or a prescription) and the structured information our system reads from those documents (patient name, date of birth, medications, the nature of the request). We hold this only to deliver and display it to the intended professional. It is automatically and permanently deleted from our systems 30 days after it was sent or received.
3. Technical information: device push-notification tokens, app version, and standard server logs (such as IP address and timestamps) used for security, troubleshooting, and keeping the service running. Logs are retained briefly and never used for profiling.
We collect no advertising identifiers, and we do not track users across other apps or websites.
How we use information
- To deliver communications between the professionals a message is addressed to — and to no one else.
- To read incoming documents with our AI so they arrive organized (patient, medications, request type) for the receiving professional. This processing happens in Canada, and our AI providers are contractually and technically prevented from using the content to train their models.
- To verify that professionals are who they say they are.
- To secure, maintain, and improve the reliability of the service (using technical data only — never patient content).
We do not sell information, share it with advertisers, or use it for marketing.
Where information lives, and for how long
All Scriptify systems that store or process patient information run in Amazon Web Services data centres located in Canada (Canada Central region). Documents and their extracted information are deleted 30 days after they were sent or received — both the files and the database records. Professional account information is kept while the account is active and removed on account deletion, except for the minimal record described under “Your account and deletion”.
Push notifications are delivered through Apple's and Expo's notification services. Notifications never contain patient information — only the type of request and the name of the sending pharmacy or clinic.
Security
- Encryption in transit and at rest for all data.
- Physician accounts are licence-checked and identity-verified before activation.
- Every prescription or reply is confirmed with the physician's device biometrics (Face ID or Touch ID) at the moment of signing, using the device's secure hardware, and our server verifies that confirmation before anything is sent.
- Access to production systems is restricted and logged.
- If we ever discover a breach affecting personal health information, we will notify the affected custodians promptly so they can meet their PHIPA obligations, and we will cooperate fully.
Who else touches the data (service providers)
We use a small number of service providers, each bound to use data only to provide their service to us:
- Amazon Web Services (Canada) — hosting, storage, document reading (OCR), and AI processing, all in the Canada Central region.
- SRFax (Canada) — transmission of traditional faxes to and from fax machines.
- Stripe Identity — one-time physician identity verification (government ID check).
- Apple — Sign in with Apple, and push-notification delivery; Expo — push-notification relay. Notification content contains no patient information.
- Google — Google sign-in for professional accounts.
We will update this list if it changes.
Patients' rights
If you are a patient and wish to access or correct your health information, contact your pharmacy or your doctor — they hold your record, and we assist them in fulfilling such requests. If you have questions about Scriptify's handling of information, contact us at contact@rxscriptify.com and we will help or direct your request to the right custodian.
Your account and deletion
Professionals may delete their account at any time from within the app (Profile → Delete My Account) or by contacting us. On deletion, every device is signed out, sign-in identities are released, contact details, notification settings, the drawn signature and any saved patient list are removed, and messages still within their 30-day window are removed from the account's view and expire on schedule. We retain only the minimal record required for professional accountability: the professional's name, licence number and college, and the record of their acceptance of our Terms.
Children
Scriptify is a tool for licensed healthcare professionals and is not directed to children. Patient information about minors is handled solely on the instructions of the treating custodians.
Changes
If we change this policy, we will post the new version here with a new effective date, and for significant changes we will notify professional users in the app.
Contact
RxScriptify Inc. · Ontario, Canada · contact@rxscriptify.com