Privacy Policy

Last updated: 7 September 2026

Dr.Prescribe is an offline, on-device prescription and patient-record app used by a medical practitioner inside their own clinic. This policy explains how it handles information.

The short version

• Patient and clinic information is not sent to us. Dr.Prescribe does not transmit patient or clinic information to the developer or any cloud service.
• Subscriptions are provided by Apple. On iOS, StoreKit communicates with Apple to display, purchase, restore, and verify subscriptions. Patient and clinic information is not included in that communication.
• Your data is encrypted on your device. If you lose the device, keep backups — no one, including the developer, can recover the data for you.
• Optional sync stays between your own devices. If you choose to use “Connect to computer”, the app links directly to your own paired computer over your local Wi‑Fi network to copy your records across. This is peer‑to‑peer, encrypted, involves no developer server or cloud service, and never touches the internet. It is entirely optional — the app is fully functional without it.

What data the app stores

You (the doctor) enter and the app stores, only on the device:

• Patient details you record (name, phone, and the clinical information for each visit: complaints, vitals, and prescription items).
• Your clinic/doctor profile used on the printed prescription.
• App settings (app-lock PIN — stored only as a salted hash, never the PIN itself — biometric preference, auto-lock timeout, and the date of your last backup).

How the data is protected

• All patient data is stored in a database that is encrypted at rest (SQLCipher).
• The encryption key is generated randomly on the device and held in the device's secure hardware-backed store. It is never hardcoded, never logged, and never synced.
• The app can be locked with a PIN and/or Face ID / Touch ID / fingerprint.

Sync between your own devices (optional)

Dr.Prescribe can copy your records to a companion Dr.Prescribe app running on your own computer, using the “Connect to computer” feature. This is entirely optional and off by default. When you use it:

• The connection is peer‑to‑peer over your local Wi‑Fi network only — directly between your phone and your computer. There is no server, no cloud, and no internet involved, and no account.
• You link the two devices by scanning a one‑time QR code shown on the computer and confirming a short code on both screens, so only devices you physically control can pair.
• Patient data is encrypted while it travels between the two devices.
• The camera permission is used only to scan that pairing QR code, and the local‑network permission is used only for this direct device‑to‑device link.
• Your patient and clinic information is never sent to the developer.

Subscriptions and Apple StoreKit

On iOS, Dr.Prescribe uses Apple StoreKit solely to provide subscriptions. StoreKit connects to Apple to load subscription options, complete purchases, restore purchases, and verify whether a subscription is active. These requests concern the app's products and purchase entitlement; Dr.Prescribe does not add patient or clinic information to them. Apple's handling of purchase and account information is governed by Apple's privacy policy.

User-initiated sharing and exports

Dr.Prescribe shares information only when you choose a share, print, export, or backup action:

• When you share or print a prescription PDF, the operating system sends it to the app, printer, person, or service you select, such as Mail, WhatsApp, or a print service.
• When you export or schedule an encrypted backup, you choose its destination. Depending on the services installed or configured on your device, this may be a local folder, USB drive, iCloud Drive, Google Drive, another storage provider, or email.
• The developer does not receive these files. Once you send a file to another person or service, that recipient's privacy and security practices apply.

What the app does NOT do

• It does not transmit patient or clinic information to the developer or automatically upload it to a cloud service. The only network communications initiated by the app are Apple StoreKit subscription requests on iOS and the optional local‑Wi‑Fi sync described above.
• It does not use analytics, advertising, crash reporting, or tracking of any kind.
• It does not create accounts.
• It does not share patient or clinic information with the developer.

Backups

You can export an encrypted backup file, protected by a passphrase you choose, to keep your data safe. You choose where to save it, including a local folder, USB drive, email, or a cloud-storage folder available through your device. Keep both the backup and its passphrase safe: the developer cannot recover either one. Storage and email services you select operate under their own privacy policies.

Data retention and deletion

The app's working data stays on your device until you delete records within the app or uninstall the app. Uninstalling removes the app's on-device data. The developer holds no server-side copy of your patient or clinic information to recover or delete. Files that you shared or backed up remain at the destinations you selected until you delete them there.

Children

Dr.Prescribe is a professional tool for use by a clinician, not intended for use by children.

Your responsibilities as the clinician

Because the app stores patient information, keep the device secured (device passcode, the app lock) and comply with the medical record-keeping and data-protection rules that apply to your practice, including India's Digital Personal Data Protection Act, 2023.

Changes

If this policy changes, the "Last updated" date above will change.

Contact

For privacy questions, email support@drprescribe.in.