Legal
Privacy Policy
Last updated: April 5, 2026 · Effective date: April 5, 2026
🏥 1. Who We Are
PharmaWise ("we," "us," or "our") is a medication education platform built and operated by Dibiax Health Technologies, a Maryland-based health technology company. We provide patients with plain-language explanations of their medications through pharmacy partner sites accessible at pharmawise.health and related domains.
This Privacy Policy explains how we collect, use, and protect information when you use the PharmaWise platform.
📋 2. Information We Collect
Information you provide directly:
- Email address or phone number (for account login via one-time passcode)
- Medication names you look up or save to your profile
- Medication reminders and refill schedules you set
- Photos of prescription labels or pills you upload for identification (processed and not stored permanently)
- Delegate (caretaker) access you grant to another person
Information collected automatically:
- Device type, browser, and operating system
- Pages visited and features used (for analytics and improvement)
- IP address (used for security, not linked to your identity)
Information we do NOT collect: We do not collect Social Security numbers, payment card details (payments are handled by Stripe), full medical records, or insurance information.
⚙️ 3. How We Use Your Information
We use your information to:
- Provide and personalize the medication education service
- Send you one-time login passcodes via email or SMS
- Deliver medication reminder notifications you have set up
- Generate plain-language medication explanations using AI (drug name only is sent — no personal identifiers)
- Analyze usage patterns to improve the platform (aggregated, de-identified)
- Comply with legal obligations and respond to lawful requests
We do not use your information for advertising, and we do not sell your data.
🤝 4. How We Share Your Information
We share your information only in the following limited circumstances:
- Your pharmacy partner: The pharmacy that provided you access to PharmaWise may see aggregate usage data (e.g., how many patients looked up a medication). They do not see your individual profile data unless you are a patient of theirs and they are authorized under a signed Business Associate Agreement (BAA).
- Service providers: We use third-party vendors (Supabase for database, Resend for email, Twilio for SMS, ElevenLabs for text-to-speech, a proprietary AI engine for medication explanations, Stripe for payments). These vendors process data only on our behalf under confidentiality obligations.
- Legal requirements: We may disclose information if required by law, subpoena, or to protect the rights, safety, or property of PharmaWise or others.
- Business transfers: In the event of a merger or acquisition, your information may be transferred to the successor entity under the same privacy protections.
We never sell, rent, or trade your personal information to third parties for their own marketing purposes.
🔒 5. HIPAA & Health Information
PharmaWise handles health-related information (medication names, dosing schedules) and takes HIPAA compliance seriously. Where required, we operate under a signed Business Associate Agreement with covered pharmacy entities.
Key protections we have in place:
- Data is stored in encrypted databases with access controls
- Audit logging of access to protected health information
- Staff and vendor access is limited to what is necessary to operate the service (minimum necessary standard)
- Breach notification procedures are in place in compliance with the HIPAA Breach Notification Rule
PharmaWise is an educational tool and does not create, transmit, or maintain full Electronic Health Records (EHRs). If you have questions about your rights under HIPAA, please contact us at the address below.
🛡️ 6. Data Security
We use industry-standard safeguards to protect your information:
- All data is transmitted over HTTPS (TLS encryption)
- Databases are encrypted at rest
- Authentication uses one-time passcodes — we never store passwords
- Access tokens expire automatically
- Camera/photo uploads for pill or label scanning are processed in real time and not stored permanently on our servers
No system is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@pharmawise.health.
✅ 7. Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Ask us to correct inaccurate information in your profile.
- Deletion: Request that we delete your account and associated data. Note that some data may be retained for legal or safety purposes.
- Data portability: Request an export of your medication list and reminder data.
- Withdraw consent: You may revoke delegate (caretaker) access at any time from your profile settings.
- Opt out of communications: You may unsubscribe from non-essential emails at any time.
To exercise any of these rights, email us at privacy@pharmawise.health. We will respond within 30 days.
🍪 8. Cookies & Local Storage
PharmaWise uses browser local storage (not traditional cookies) to:
- Keep you logged in across visits (session token)
- Remember your chat conversation history with the in-app assistant
- Store your consent acknowledgment so you are not prompted again
We do not use third-party advertising cookies or tracking pixels. You can clear local storage at any time through your browser settings, which will log you out.
👶 9. Children's Privacy
PharmaWise is not directed to children under 13. We do not knowingly collect personal information from children under 13. If a parent or guardian believes their child has provided us with personal information, please contact us at privacy@pharmawise.health and we will promptly delete it.
Caretakers managing medications for a minor may use the delegate access feature under their own account.
📝 10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email (if you have an account) or by displaying a notice on the platform.
Your continued use of PharmaWise after changes are posted constitutes your acceptance of the updated policy.