Privacy Policy
Last updated: 2026-06-14
This is a plain-language summary written for the GenAccess MVP. It is not legal advice; it will be reviewed by counsel before any clinic partnership.
What GenAccess is
GenAccess is a personal medication reminder and tracking tool. It is a general-wellness app — it does not diagnose, treat, or give medical advice, and it is not a medical device.
Two ways to use it
Anonymous mode: your data stays only on your device and is never sent to our servers. Account mode: you sign in with an email magic link and your data is stored in our database so it can sync and power reminders.
What we collect (account mode only)
Your email address; the medications you add (name, dose, schedule); your dose logs; your language preference; and, only if you choose to provide them, your name and mobile phone number, and the name and email address of any caregiver you choose to invite; and, if you add them (often from a label scan), your medication's prescriber, pharmacy, fill date, and days supply. We never collect your date of birth, Social Security number, insurance ID, or photos of cards.
How we use it
Only to send your reminders and show you your own adherence. We do not sell your data and we do not use it for advertising. Separately, we keep a de-identified, aggregate measure of pharmacy access by area — only a 3-digit ZIP prefix and the access level, never linked to you — to understand where access is hardest.
Text-message reminders
Providing a phone number is optional. If you add one and opt in, we use it only to text you reminders about your own doses — never for marketing — and we never sell or share it. You can delete the number or turn texts off at any time, or reply STOP. If text reminders are active, your phone number and the reminder message are processed by an SMS delivery provider solely to send that message.
Caregiver alerts (optional)
You can optionally invite a trusted family member or caregiver to be notified if you miss several scheduled doses in a row. This is entirely opt-in and you can turn it off or remove the caregiver at any time. When you add a caregiver, you give us their name and email address, and you confirm you have their permission to do so. Before we ever contact them, the caregiver must separately confirm they agree to receive alerts (a double opt-in) — until they confirm, we send them nothing. They can decline, and can opt out later at any time. To protect your privacy, caregiver alerts say only that you have missed several scheduled doses — they never include the names or details of your medications. We use the caregiver's email solely to send these alerts and the one-time confirmation request, never for marketing, and we never sell or share it. We delete a caregiver's details when you remove them or close your account.
Service providers
We use Supabase (database and sign-in), Vercel (hosting), Resend (reminder emails, and any caregiver-alert emails), PostHog (privacy-respecting product analytics), Sentry (error monitoring), and — only if you enable text reminders — an SMS delivery provider that receives just your phone number and the reminder text. We do not use third-party advertising networks or send your data to any third-party AI service. To look up medication and pharmacy information, we also send the medication name you type or scan to public drug-reference services (the U.S. FDA's openFDA, the NIH's RxNorm, and Cost Plus Drugs for pricing), and — only when you check pharmacy access — your ZIP or approximate location to OpenStreetMap. These lookups include no name, email, or other identifier, and your label photos are never uploaded.
Security
Data is encrypted at rest. Row-level security means only you can read your own records. We do not write medication details into plaintext logs, and we keep a documented breach-response process consistent with the U.S. FTC Health Breach Notification Rule. If any address information is captured — for example, printed on a prescription label you scan — it is encrypted, kept private to your account, never sold, and never used for advertising.
Your choices
You can use the app anonymously, turn reminders off, opt out of email fallback, or ask us to delete your account data. Clearing your browser data removes anything stored in anonymous mode.
Not a HIPAA covered entity
This is a consumer app and is not a HIPAA-covered entity. Please do not use it to exchange protected health information on behalf of a clinic or provider.
Contact & changes
Questions: privacy@genaccess.app. If this policy changes we will update the date above.