The short version. Rxact runs entirely on your device. The medication and family information you enter stays on your phone in encrypted form — and, if you turn on iCloud, in your personal iCloud account under Apple's terms. We do not operate servers, accounts, or backups that receive your data, and we have no access to it. We do not sell it, and we do not share it with anyone. We collect and process it only on your device, only to provide the medication-organization features you ask for.
Because this policy is required to be standalone under the My Health My Data Act, it contains only the information that Act requires. For everything else about how Rxact treats your information, see our general Privacy Policy.
What this policy covers
Washington's My Health My Data Act regulates "consumer health data" — broadly, information that is linkable to a consumer and that identifies their past, present, or future physical or mental health status. The medication, dosage, schedule, and related information you enter into Rxact can be consumer health data under that Act. This policy explains how Rxact handles that information.
This policy applies to consumers who are Washington residents and to consumers whose consumer health data is collected in Washington. Out of respect for your privacy, we apply the same on-device protections to all users, wherever they live.
How Rxact works, and what that means for your data
Rxact is built to run entirely on your device. Everything you enter is stored locally in encrypted form, protected by your device's own passcode and biometric locks. We do not operate accounts, cloud servers, or backups that receive or hold your information, and we never collect, transmit, or store it on systems we control.
This means the collection and processing of your consumer health data happens on your own device, in the App, to provide the features you have requested. If you enable Apple's iCloud, a copy may be stored in your personal iCloud account under Apple's terms — not ours.
Because your data never leaves your device for any system we control, we have no ability to access, read, sell, or share your consumer health data. It is yours, and it stays with you.
Consumer health data we collect, and why
Rxact collects and processes the following categories of consumer health data — entirely on your device — for the purpose of providing the medication-organization service you request:
| Category of consumer health data | Purpose & use |
|---|---|
| Names or identifiers of the people you care for, and optionally their age or date of birth | To organize medications by person within the App. |
| Medications, dosages, schedules, instructions, and the reason a medication is taken | To display each person's regimen, generate reminders, and track supply. |
| Supply counts, refill dates, and pharmacy or prescriber names you choose to record | To warn you before a refill is needed. |
| Dose history — whether a dose was taken, skipped, or snoozed, and when | To maintain the record and the lists you ask to export. |
| Notes you add | To store the information you choose to keep. |
We collect and process this data only as necessary to provide the features you have requested. We do not use it for advertising, profiling, or any purpose beyond operating the App for you.
Sources of the data
There is one source of consumer health data in Rxact: you. The App collects only what you enter yourself or supply from your own device — for example, information you type, or content you add from your camera, photos, or files. Rxact does not draw consumer health data from any outside source, data broker, or third party.
Sharing of consumer health data
We do not share your consumer health data with anyone. Because your data stays on your device and we have no access to it, there is nothing for us to share with third parties or affiliates, and we do not do so.
The only time your information leaves your device is when you choose to export or share a medication list yourself — for example, sending it to a doctor or family member. When you do that, you are the one sharing it, to a recipient you choose, and that recipient handles it under their own practices, which we do not control.
| Categories of consumer health data shared | None. |
|---|---|
| Categories of third parties data is shared with | None. |
| Specific affiliates data is shared with | None. Grenada Digital LLC has no affiliates with which consumer health data is shared. |
Selling of consumer health data
We do not sell your consumer health data, and we never will. We have never sold consumer health data, and we do not seek the authorization that the My Health My Data Act would require for any such sale, because we do not engage in it.
Your rights under the My Health My Data Act
If you are a Washington consumer, you have the following rights regarding your consumer health data:
- The right to confirm and access the consumer health data Rxact processes about you. Because your data lives in the App on your device, you can view all of it directly in Rxact at any time.
- The right to withdraw consent to our collection and processing of your consumer health data. You can do this at any time by deleting the data — including with the "Delete All Data" button in the App's Settings — or by deleting the App.
- The right to delete your consumer health data. You can delete any person, medication, or record inside the App, erase everything at once using the "Delete All Data" button in the App's Settings, or delete the App to remove its data from your device. This deletion right has no exceptions.
- The right to not be discriminated against for exercising any of these rights.
Because Rxact stores your data on your device and we hold no copy, you can exercise each of these rights yourself, directly in the App, without needing to contact us.
How to exercise your rights
The fastest way to exercise your rights is directly in the App: view your data on each person's screen, delete any person, medication, or record, use the "Delete All Data" button in Settings to erase everything at once, or delete the App entirely to remove its data from your device. If you enabled iCloud, you can remove the iCloud copy through your Apple account settings.
If you would like our help, or cannot complete a request yourself, contact us at [email protected]. We will respond without undue delay, and within 45 days of receiving your request (we may extend that period by an additional 45 days where reasonably necessary, and will tell you if we do). If we decline a request, you may appeal by replying to our response; if your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
How we protect consumer health data
Your consumer health data is stored on your device in encrypted form and protected by your device's passcode and biometric locks. We practice data minimization by design: the data is collected and processed only on your device, only to provide the features you request, and we hold no copy on any system we control. If you enable iCloud, that copy is protected under Apple's terms and security.
Changes to this policy
If we change how Rxact handles consumer health data, we will update this policy and the "Last updated" date above before the change takes effect, and — where the My Health My Data Act requires — we will obtain your consent before collecting, using, or sharing consumer health data in any way not described here.
Contact us
For any question or request about your consumer health data:
Grenada Digital LLC
Texas, United States
Privacy [email protected]
Web rxact.io