Privacy Policy
The short version. Presora keeps your medicine and health information to run the app for you. We don't sell it, show ads or use trackers. Prescription photos are read on our own server, and only go to an outside AI service (DeepSeek, in China) if you allow it. Caregivers see your information only after you invite them. You can delete your account and data at any time.
1. Who we are
Presora is a medicine reminder app. It is provided by [Company legal name], [Registered address] ("Presora", "we", "us"). We are responsible for your personal information as described in this policy. You can reach us at info@presora.health.
2. What we collect
Information you give us
- Account: your name, email address, password (stored only as a secure hash by our sign-in provider) and, if you add it, your phone number.
- Profile: details you choose to add, such as date of birth or age, gender, blood group, height, weight, allergies, conditions, emergency contacts, language, profile photo, reminder times and notification settings.
- Medicines and prescriptions: the medicines you confirm (name, strength, dose, timing, food instructions, duration, notes), the prescribing doctor and hospital if shown, and your dose history (taken, skipped, snoozed or missed, with times).
- Health records: conditions and medical history you add, including diagnosis searches you type.
- Caregivers: the name, email, phone number and relationship of people you invite, and alerts raised for them.
- Prescription photos: the photos you take to scan a prescription. See section 4.
- Messages to us: anything you send when you contact support.
Information collected automatically
- Device and notifications: a push-notification token, your device's platform and name, and your phone's timezone (so reminders ring at the right local time).
- Server logs: when the app talks to our server we record basic request details (time, address requested, result). Your IP address is used briefly to limit abuse, such as repeated sign-in attempts.
- Activity log: a record in your account of actions such as "prescription confirmed" or "dose marked taken", which you can see in the app.
We do not use advertising, analytics or tracking tools, in the app or on this website. This website sets no cookies.
3. How we use it
| Purpose | Legal basis |
|---|---|
| Running your account, reminders, dose history and health records | Our agreement with you (the Terms of Use), and your explicit consent for health information |
| Reading prescription photos on our server | Your explicit consent, given when you sign up |
| Sending a photo to the AI service when our server can't read it | Your separate, explicit consent, which you can withdraw at any time |
| Alerting caregivers you invited when a dose is missed | Your consent, given by inviting them |
| Sending account emails (verification codes, password resets, caregiver invitations, deletion links) | Our agreement with you |
| Improving prescription reading (see section 4) | Our legitimate interest in making reading more accurate with less reliance on AI, limited as described below |
| Keeping the service secure and preventing abuse | Our legitimate interest, and legal obligations |
We never use your information for advertising, and we never sell it.
4. Prescription photos and AI reading
- Read on our server first. When you scan a prescription, the photo is sent to Presora's server and read with text-recognition software running there. At this step nothing leaves Presora.
- AI reading, only if you allow it. Handwritten or unclear prescriptions often can't be read that way. If you have allowed AI reading, the photo is then sent to DeepSeek, an AI service whose servers are in China. We send only the photo and instructions, not your name or account details, though the photo itself may show your name or other details. You're asked before your first scan, and you can change this any time in the app under Profile → Privacy. If you choose server-only reading, your photos are never sent to DeepSeek.
- You check everything. Whatever is read, by our server or by the AI, is shown to you to check and correct before any reminder is created.
- What we keep. We don't store your prescription photos on our server after reading them; we keep only a fingerprint (a hash) of each photo, used to recognise the same photo if you send it again. When a photo needed AI reading, we keep the recognised text and the AI's reading for up to 90 days, to find patterns and improve our own reading so fewer photos need AI. If you chose server-only reading, that text isn't kept. Readings are only ever reused for your own account.
- Learning medicine names. When a medicine name was read the same way by our server and the AI, and you confirmed it unchanged, we note that agreement (the medicine name and your account). A name is only added to our medicine list after a person at Presora reviews it and it has been confirmed by several different users. The medicine list itself contains no personal information.
The photos stay on your phone in the app so you can look back at them, until you delete the prescription or your account.
5. Who we share it with
We share information only with the service providers below, who process it for us under contract and only to provide their service, and with the people you choose.
| Who | What for | Where |
|---|---|---|
| Supabase | Database and sign-in (stores your account and app data) | United States |
| Railway | Hosting our server and this website | United States |
| DeepSeek | AI reading of prescription photos, only if you allow it | China |
| Expo and Google (Firebase Cloud Messaging) | Delivering push notifications, such as caregiver alerts | United States |
| Resend | Sending emails (codes, invitations, deletion links) | United States |
| World Health Organization (ICD API) | Looking up diagnoses when you search your medical history (the search words only) | Switzerland |
- Caregivers you invite can see your dose adherence and the prescriptions and medical history you choose to share, and receive missed-dose alerts. You can remove them at any time.
- If the law requires it, we may disclose information to comply with a valid legal request, and we'll tell you where we're allowed to.
- If Presora is sold or merged, your information may transfer to the new owner under this policy, and we'll tell you first.
6. International transfers
Your information is stored and processed in the United States, and, if you allow AI reading, prescription photos are processed in China. These countries may not have the same data protection laws as where you live. We rely on our providers' contractual commitments to protect it and, for AI reading, on your explicit consent.
7. How long we keep it
| Information | Kept for |
|---|---|
| Account, profile, medicines, dose history, health records, caregiver links | Until you delete them or your account |
| Recognised text and AI readings of photos that needed AI | Up to 90 days, or until you delete your account if sooner |
| Medicine-name agreements (section 4) | Until you delete your account |
| Account-deletion links | Up to 1 hour |
| Server request logs | Kept by our hosting provider for a limited period under its own retention settings |
| Backups | Deleted data can remain in our database provider's backups until they roll over, typically within a few weeks |
8. How we protect it
- All connections are encrypted (HTTPS).
- Your data is accessible only through our server, which checks your sign-in on every request and only ever returns your own information (or what someone chose to share with you).
- Our database blocks direct public access, and our server uses an account with only the permissions it needs.
- Keys for outside services are kept on our server, never in the app.
- On your phone, the app's data is stored encrypted, and you can lock the app with your fingerprint or face.
No system is perfectly secure. If a breach affects your information, we'll tell you and the relevant authorities as the law requires.
9. Your rights and choices
Depending on where you live, you have the right to:
- Access your information. Most of it is visible in the app; email us for a full copy.
- Correct it, in the app or by emailing us.
- Delete it: delete your account in the app (Profile → Delete account) or from this website.
- Withdraw consent at any time: turn off AI reading in Profile → Privacy, remove caregivers, or delete your account. Withdrawing doesn't affect what was done before.
- Object to, or ask us to restrict, how we use your information.
- Receive a copy of your information in a portable format, by emailing us.
- Complain to your local data protection authority.
Email info@presora.health to use any of these rights. We'll reply within 30 days, and may need to confirm it's you first.
10. On your phone
Presora keeps a copy of your information on your phone so reminders work without an internet connection. Reminder notifications can show medicine names on your lock screen; you can change this in your phone's notification settings. The copy stays on the phone when you sign out, so you can sign back in; it is removed if a different account signs in on that phone, if you delete your account, or if you uninstall the app.
11. Children
Presora is meant for people aged 16 and over. A parent or guardian can use it to manage a child's medicines on their own account. If you think a child under 16 has created an account, contact us and we'll delete it.
12. Changes to this policy
If we change this policy in a way that matters, we'll tell you in the app or by email before the change takes effect, and ask for your consent again where required. The version and date are shown at the top.
13. Contact us
Questions or requests about your privacy: info@presora.health.
Post: [Company legal name], [Registered address].