Privacy Policy
Scriptify connects pharmacies, physicians and nurse practitioners so that prescriptions, refill requests, and related communications move quickly and securely, and lets clinicians request payment from a patient for an uninsured service. This policy explains, in plain language, what information we handle, why, and what we will never do with it. Patients who use Scriptify Care, our written-consultation service, should also read the Scriptify Care privacy policy at https://askforcare.ca/privacy.
The short version
- Patient information belongs to your clinician and your pharmacy — not to us. It passes through Scriptify on their instructions, encrypted, and is automatically deleted from our systems 30 days after it was sent or received.
- No personal health information leaves Canada. Patient documents and personal health information are stored and processed in Amazon Web Services data centres in Canada, including our AI document reading. Where an automated tool operates outside Canada it receives only text that has been de-identified first; that text is not retained and is never used to train any model.
- We never sell data. We never use it for advertising. Our AI never trains on it — and it never makes a clinical decision: it organises information for a licensed professional to review.
- Physicians and nurse practitioners on Scriptify are identity-verified, licensed professionals, and every prescription or reply they send is confirmed with their device biometrics (Face ID or Touch ID) at the moment of signing.
Who we are under Ontario law
Under Ontario's Personal Health Information Protection Act (PHIPA), your physician or nurse practitioner and your pharmacy are the health information custodians — the parties legally responsible for patient records. Scriptify acts as their service provider (agent) and, where it provides services to two or more custodians, as a health information network provider: we transmit, display, and briefly hold information on their behalf and instructions, and we use it for no other purpose. The lasting legal record of any prescription remains in the clinician's chart and the pharmacy's dispensing record, exactly as it does today. For Scriptify Care, the clinician who answers a request is the custodian of that consultation record.
What we collect
1. Professional account information (physicians, nurse practitioners, pharmacists, clinic staff): name, professional licence number and regulatory college, contact details, workplace details (clinic or pharmacy name, address, fax number), sign-in identity (Sign in with Apple or Google), a drawn signature for physicians and nurse practitioners, and — for physicians and nurse practitioners — a one-time government-ID identity verification carried out by our verification provider. A clinician who chooses to receive payments opens a payout account with our payment processor; bank details are entered with the processor, never with us. We keep this while your account is active.
2. Patient health information passing through the platform: the documents professionals send each other (for example, a refill request or a prescription) and the structured information our system reads from those documents (patient name, date of birth, medications, the nature of the request). We hold this only to deliver and display it to the intended professional. It is automatically and permanently deleted from our systems 30 days after it was sent or received.
3. Payment requests: the patient's name, mobile number, the amount and the payment status, entered by the clinician to request payment for an uninsured service. The name and mobile number are removed 30 days after the request; the amount, status and dates are kept as the clinician's accounting record, and the payment itself is held by Stripe. Card details go directly to Stripe and never pass through Scriptify.
4. Scriptify Care requests: what a patient submits for a written consultation is handled as described in the Scriptify Care privacy policy.
5. Technical information: device push-notification tokens, app version, and standard server logs (such as IP address and timestamps) used for security, troubleshooting, and keeping the service running. Logs are retained briefly and never used for profiling.
We collect no advertising identifiers, and we do not track users across other apps or websites.
How we use information
- To deliver communications between the professionals a message is addressed to — and to no one else.
- To read incoming documents with our AI so they arrive organized (patient, medications, request type) for the receiving professional. This processing happens in Canada, and our AI providers are contractually and technically prevented from using the content to train their models.
- For Scriptify Care, to ask a patient follow-up questions and to organise their request under standard headings before a clinician sees it. Our AI is assistive: it never gives advice or makes a clinical decision, and the patient's own words are always shown to the clinician.
- To request and process a payment on a clinician's instruction, including texting the patient the payment link and emailing a receipt.
- To verify that professionals are who they say they are.
- To secure, maintain, and improve the reliability of the service (using technical data only — never patient content).
We do not sell information, share it with advertisers, or use it for marketing.
Where information lives, and for how long
Patient documents and personal health information are stored and processed in Amazon Web Services data centres in Canada. Text messages, push notifications and payment processing are carried by the service providers listed below and contain no personal health information. No personal health information leaves Canada: where automated text processing takes place outside Canada, it receives only text that has been de-identified in Canada first (names, contact details, health numbers and other identifiers removed); that text is not retained by the provider and is never used to train any model. Documents and their extracted information are deleted 30 days after they were sent or received — both the files and the database records. Professional account information is kept while the account is active and removed on account deletion, except for the minimal record described under “Your account and deletion”.
Push notifications are delivered through the device platform's notification service. Notifications never contain patient information — only the type of request and the name of the sending pharmacy or clinic. Text messages are sent through Twilio and contain a first name, a link and a verification code — never clinical content.
Security
- Encryption in transit and at rest for all data.
- Physician and nurse practitioner accounts are licence-checked and identity-verified before activation.
- Every prescription or reply is confirmed with the clinician's device biometrics (Face ID or Touch ID) at the moment of signing, using the device's secure hardware, and our server verifies that confirmation before anything is sent.
- Access to production systems is restricted and logged.
- If we ever discover a breach affecting personal health information, we will notify the affected custodians promptly so they can meet their PHIPA obligations, and we will cooperate fully.
Who else touches the data (service providers)
We use a small number of service providers, each bound to use data only to provide their service to us:
- Amazon Web Services (Canada) — hosting, storage, document reading and automated text processing, in Canada.
- Automated text processing — a cloud AI service that helps organise de-identified consultation text; it does not store that text and does not use it to train any model.
- SRFax (Canada) — transmission of traditional faxes to and from fax machines.
- Stripe — one-time identity verification of physicians and nurse practitioners (government ID check), and payments and payouts. Card and bank details go directly to Stripe; Scriptify stores only payment references, amounts and statuses.
- Twilio — text messages: a first name, a link and a verification code; no clinical content.
- Sign-in and notification services — Sign in with Apple and Google sign-in for professional accounts, and the device platform's push-notification service. Notification content contains no patient information.
We will update this list if it changes.
Patients' rights
If you are a patient and wish to access or correct your health information, contact your pharmacy or your clinician — they hold your record, and we assist them in fulfilling such requests. If you have questions about Scriptify's handling of information, contact us at contact@rxscriptify.com and we will help or direct your request to the right custodian.
Your account and deletion
Professionals may delete their account at any time from within the app (Profile → Delete My Account) or by contacting us. On deletion, every device is signed out, sign-in identities are released, contact details, notification settings, the drawn signature and any saved patient list are removed, and messages still within their 30-day window are removed from the account's view and expire on schedule. We retain only the minimal record required for professional accountability: the professional's name, licence number and college, the record of their acceptance of our Terms, and the accounting record of any payments described above.
Children
Scriptify is a tool for licensed healthcare professionals and is not directed to children. Patient information about minors is handled solely on the instructions of the treating custodians.
Changes
If we change this policy, we will post the new version here with a new effective date, and for significant changes we will notify professional users in the app.
Contact
RxScriptify Inc. · Ontario, Canada · contact@rxscriptify.com