Privacy policy

OpenRX is operated by Kyle Foley. This policy covers the OpenRX iOS app, its Apple-hosted CloudKit records, support communications, and the public reporting website. It does not replace Apple's own privacy terms for Sign in with Apple, iCloud, CloudKit, the App Store, or device backups.

• Account information: a Sign in with Apple account identifier and, only when Apple provides them and you choose to share them, your name and email address. These values are used for sign-in and account continuity.
• Private medication information: saved medications, manufacturers, doses, refill history, pharmacy, fill dates, batch or lot details, product codes, ratings, side effects, dose timing, supplements, and personal journal content. This information is stored on your device and in your private CloudKit database.
• Optional profile information: display name, age range, biological sex, years using medication, and join date. Profile records are stored in your private CloudKit database.
• Community submission information: the medication-experience details you choose to share, plus an account link that allows you to manage or delete your submissions. Your name, email address, profile name, and account identifier are not displayed with community reports.
• Local technical information: app preferences, sync state, cached community data, and recent error state used to operate the app. The iOS app does not add an advertising identifier or third-party analytics SDK.
• Website analytics: Vercel Web Analytics records anonymous page views and an Aggregate CSV Download event. Data points may include an event timestamp, page path without query parameters, referrer, approximate location, browser, operating system, and device type. The download event includes only whether it came from the landing page or report toolbar.
• Support communications: the email address and message content you choose to send when contacting support.

When you submit a community report, OpenRX shares the medication-experience details you choose to provide so other users can search and compare community experiences.

What other users see

Other users can see the information in the report, but they are not shown who submitted it. OpenRX does not display your name, email address, profile name, or account identifier with a community report. The app keeps an account link so you can update or delete your submissions, but that link is not shown as part of the report.

What the public reporting website receives

The reporting website publishes summary statistics only. It does not publish individual community submissions or account information. Groups with fewer than five reports or fewer than five contributors are marked “Limited.”

• Authenticate your account and keep your app data available across your Apple devices.
• Save and display your personal medication history, journal, ratings, and refill information.
• Provide community search, comparisons, ratings, trends, and privacy-protected public reporting.
• Show FDA recall and shortage information for relevant medications.
• Operate, secure, troubleshoot, and improve OpenRX.
• Respond to support, privacy, and deletion requests.

OpenRX relies on Apple for Sign in with Apple, CloudKit storage and synchronization, iCloud account status, App Store distribution, and related platform services. The app also requests public medication recall and shortage data from U.S. Food and Drug Administration endpoints. OpenRX does not sell or rent data, use it for targeted advertising, share it with data brokers, or track activity across other companies' apps and websites.

The public website is a static site hosted by Vercel with no account system, contact form, advertising, or analytics cookies. Vercel Web Analytics provides anonymized, aggregated page-view and download-event statistics without cross-site tracking. OpenRX strips medication, dosage, and other query parameters before analytics events are sent. The site stores only your selected light, dark, or system theme preference in your browser. Selecting the email support link opens your email provider, whose privacy practices also apply.

• You can use personal tracking without submitting an optional community report.
• You can edit optional profile and medication information in the app.
• The Profile section includes Delete All My Data. This initiates deletion of private medication records, your private profile, and community reports associated with your account, then clears local account data.
• Remote deletion requires a working iCloud and network connection. If the request does not complete or you want confirmation, contact support from the email address associated with your request.
• You may also email support to request access, correction, or deletion. Additional verification may be required before account-linked data is changed.

Previously published aggregate statistics and backup copies may remain for a limited period when they no longer identify or link back to an individual submission.

OpenRX uses Apple-provided authentication, Keychain storage for local sign-in information, encrypted network connections, and CloudKit security controls. Community reports are displayed without your identity information. No system can guarantee absolute security. Community reports remain available until they are deleted, removed for safety or policy reasons, or the service is discontinued. Private CloudKit and device data follow the lifecycle of your records, deletion actions, Apple account, and Apple backup settings. Support email is retained only as reasonably needed to respond, document the request, and protect the service.

OpenRX is not directed to children under 16. If you believe a child has provided personal information through OpenRX, contact support so the situation can be reviewed and the information removed when appropriate.

This policy may be updated when OpenRX features, data practices, or legal obligations change. The current version and effective date will remain available at this URL. Material product changes are also recorded in the OpenRX changelog.

For privacy questions, account deletion help, or support, email foley.kyle012@gmail.com. Please do not include medication history, account identifiers, batch information, or other sensitive health details in an unencrypted email.