NeverMissRx ("we," "our," "the app") is a family medication and wellness tracking app. This policy explains what information we collect, why we collect it, how we protect it, and the choices you have. NeverMissRx is available globally, with India as our initial launch market — this policy is written for a global audience, with specific notes for users in India where local law requires them.
This policy is a good-faith, plain-language explanation of our actual data practices, drafted at launch by CRESTACK's solo developer. It is not a substitute for legal advice, and we'll keep it updated as the app, our infrastructure, or applicable law changes.
1. Who this policy applies to
NeverMissRx uses a single-account, multi-profile model: one adult creates and controls the account, then adds profiles for the family members whose medications they help track (themselves, a parent, a spouse, a child, or others). Throughout this policy, "you" refers to the account holder — the person who registers, logs in, and controls the account — since family member profiles do not have independent logins or interact with the app directly.
2. Information we collect
Account information
Email address — used as your login identifier and for account-related communication (e.g. password reset).
Password — stored only as a securely hashed value; we never store or can see your actual password.
Family member profile information
For each profile you add under your account:
Name and relationship to you (e.g. "Mother," "Spouse," "Self")
Date of birth (used to calculate and display age)
An optional photo, if you choose to add one
Medicine and health-tracking information
This is the core purpose of the app, and the most sensitive category of data we hold:
Medicine name, dosage, form, and schedule
Optional notes you add (e.g. "take with food")
A record of each scheduled dose and whether it was taken on time, taken late, missed, or skipped, including the time you record it as taken
Feedback you choose to submit
Ratings and optional comments submitted through the in-app feedback form, kept separate from any App Store or Play Store review you may leave
What we do not collect
No location data
No payment or financial information (the app has no purchases)
No advertising identifiers — NeverMissRx shows no ads and contains no ad SDKs
No behavioral tracking or analytics data used for advertising or profiling
3. How we use your information
We use the information above for exactly one purpose: to operate the app's core features for you — your account, your family members' profiles, their medicine schedules, and the reminders and adherence tracking built around that schedule. We do not use your data for advertising, do not build behavioral profiles, and do not use it to train any third-party AI or analytics product.
4. Family members, dependents, and children's data
Because NeverMissRx is built around one adult managing medications for their whole family, a profile you add may belong to a minor — for example, tracking a child's medicine schedule.
Only the account holder — an adult — creates and logs into the account. Family member profiles, including a minor's, do not have their own login and do not interact with the app directly; all data for that profile is entered and managed by you, the account holder.
By creating an account, you confirm that you are at least 18 years old. By adding a profile for a family member who is a minor, you confirm that you are that minor's parent or legal guardian, and you consent — on their behalf — to the collection and processing of their information described in this policy, solely for the purpose of tracking their medication schedule within your account.
We do not independently collect data from a minor, do not show ads to anyone (including minors), and do not use any minor's data for tracking, profiling, or marketing of any kind.
If you are a minor's parent or legal guardian and want that profile's data removed, you can delete it the same way as any other data in your account — see Section 6.
We've aligned this section with India's Digital Personal Data Protection Act, 2023 (Section 9), which requires verifiable consent from a parent or lawful guardian before processing a child's personal data. The Act's substantive obligations are being phased in through 2027; we've chosen to build toward them now rather than wait.
5. How we store and protect your information
Database: your data is stored in Supabase, a hosted PostgreSQL provider, protected by row-level security policies that restrict every query to your own account's data — there is no shared or pooled access across accounts.
Encryption in transit: all communication between the app and our servers is encrypted using HTTPS/TLS.
Encryption at rest: data stored in our database is encrypted at rest by our hosting provider's infrastructure.
On your device: your login session is stored using your device's hardware-backed secure storage, not in plain, unencrypted app storage.
Photos you upload are stored in encrypted cloud storage, access-restricted to your account in the same way as the rest of your data.
6. Data retention and deletion
You can delete your account at any time from Settings. Because this is a single account managing your whole family's medication data, deleting your account deletes everyone's profiles, medicines, dose history, and scheduled reminders under it — not just your login.
Deletion requires re-entering your password, as a safeguard against accidental or unauthorized deletion.
Once confirmed, your access is blocked immediately, but we hold your data for a 7-day grace period in case you change your mind — logging in during this window offers you the choice to cancel the deletion and restore full access.
After 7 days, your data is permanently and irreversibly deleted from our systems.
7. Data sharing
We do not sell your data. We do not share your data with advertisers, data brokers, or any third party for their own marketing or analytics purposes.
We use Supabase strictly as our infrastructure provider — the technology that hosts our database, authentication, and file storage. Supabase processes data only on our instructions, to provide that infrastructure to us; it does not use your data for its own purposes. We may also disclose information if legally required to do so (e.g. in response to a valid legal process).
8. Your rights
Regardless of where you live, you can contact us at any time to:
Request a copy of the data we hold about your account
Correct inaccurate information (most of this you can already edit directly in the app)
Request deletion of your account and all associated data (also available directly in Settings, see Section 6)
If you are in India — rights under the DPDP Act, 2023
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you additionally have the right to:
Access a summary of the personal data we hold about you and how it's processed
Request correction, completion, updating, or erasure of your personal data
Withdraw consent at any time, as easily as you gave it (withdrawal doesn't affect processing that already happened)
Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
Raise a grievance with our Grievance Officer (contact below), and escalate to the Data Protection Board of India if unresolved
9. Where your data is stored
Your data is stored on Supabase infrastructure hosted in Stockholm, Sweden (AWS eu-north-1). If you are located outside Europe — including in India, our initial launch market — this means your personal data is transferred to and stored in the European Union. We'll update this section if that ever changes.
10. Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date above and, where the change is significant, notify you within the app.
11. Contact us
For any question about this policy, your data, or to exercise any of the rights above, contact:
CRESTACK — the entity behind NeverMissRx, represented by Rajiv Gupta
Email: nevermissrx@gmail.com
Rajiv Gupta serves as NeverMissRx's Grievance Officer under India's DPDP Act, 2023, for users in India.