Pocket Med List is a service operated by Chalice Health ("Chalice Health," "we," "us," or "our") from Midlothian, Texas. This Privacy Policy explains what information Chalice Health collects through the Pocket Med List mobile application and website, how we use and disclose it, how we protect it, and the choices available to you.
Pocket Med List is designed to help people organize medication information, receive reminders, record medication activity, keep a medication list available for appointments or emergencies, record blood-pressure and blood-glucose readings, create reports, and connect with family members, caregivers, or other care-team members they choose.
The short version: we use your information to operate Pocket Med List for you. We do not sell your personal information or consumer health data. We do not use your health information for third-party behavioral advertising.
1. Information we collect
The information we collect depends on the features you use.
A. Account and profile information
We may collect your name, email address, account identifier, authentication provider, profile preferences, and optional profile details you choose to add. Optional details may include date of birth, allergies, blood type, emergency-contact information, insurance references, or similar information used to prepare your medication or health summary.
B. Medication and consumer health information
We collect information you enter, import, or generate while using the app, which may include:
Medication names, strengths, forms, doses, instructions, schedules, start or stop dates, reasons for use, prescribing or pharmacy references, refill information, quantity, supply, and notes.
Allergies and other safety-related information you choose to enter.
Medication activity, such as doses marked taken, skipped, missed, delayed, corrected, or otherwise updated, together with dates, times, and related history.
Blood-pressure information, including systolic and diastolic readings, dates, and times.
Blood-glucose information, including glucose readings, units, dates, and times.
Reports, appointment-review information, summaries, and other records created from the information in your account.
We refer to this information as "Consumer Health Data" where applicable law uses that term.
C. Care-team and caregiver information
When you use care-team features, we may collect the name, email address, relationship, invitation status, and permission level of the person you invite. We also maintain activity records showing actions taken by account owners and authorized care-team members, including who made a change and when.
If someone invites you to a care team, we receive the information needed to deliver and manage that invitation. Please provide another person's information only when you are authorized to do so.
D. Subscription and purchase information
If you view, purchase, restore, manage, or use a Pocket Med List Pro subscription, we and our subscription service provider may receive information such as:
The subscription product and billing period you selected.
Purchase, renewal, expiration, cancellation, refund, and entitlement status.
App-store transaction or receipt identifiers, purchase dates, currency, country or locale, and related verification data.
A Pocket Med List or RevenueCat customer identifier used to connect your subscription status to your account.
Apple or Google processes your payment. We do not directly receive or store your full payment-card number.
E. Device, notification, usage, and diagnostic information
We collect technical information used to operate, secure, and understand use of the app, including device type, operating system, app version, language, locale, time zone, notification tokens and preferences, authentication and session information, and security or service error logs.
The Android app includes Google Analytics for Firebase. It automatically collects app-instance identifiers, app lifecycle and session events, device and app information, approximate location derived from an IP address, and applicable in-app purchase events. This supports usage analysis and service improvement. This approximate location does not come from a GPS measurement by Pocket Med List.
If you choose a profile photo, the app saves the image on your device. The app synchronizes the profile record, including its local image-file path, but does not upload that local photo file as a cloud profile image.
Your device's operating system may process biometric information when you use a device biometric lock. Pocket Med List does not receive your fingerprint, face template, or other biometric template from the device.
F. Medication search information
When you search for a medication or strength, the search terms and selected result may be processed to return standardized medication information, including information from RxNorm or similar medication terminology services. Do not put a person's name or other unnecessary identifying details into a medication search field.
G. Communications and website information
If you contact us, request support, submit a privacy request, or use a website form, we collect the information you provide and related correspondence. Our website may also receive ordinary server logs and similar technical information, such as browser type, device type, approximate region derived from an IP address, pages requested, and timestamps.
2. Sources of information
We obtain information:
Directly from you.
From an authorized caregiver or care-team member who acts within permissions granted through the app.
From Apple or Google when you sign in or make an in-app purchase.
From RevenueCat when it verifies and manages subscription status.
From your device and the app when you use features, receive reminders, or encounter technical errors.
From service providers that help us authenticate users, host and secure data, deliver notifications and email, provide medication search results, manage subscriptions, or provide support.
3. How we use information
We use information to:
Create, authenticate, and manage accounts.
Save and synchronize medication lists, health readings, preferences, and related records.
Generate reminders, refill information, medication activity history, safety prompts, appointment summaries, reports, and other app features.
Show information to care-team members you authorize, according to the access controls presented in the app.
Process, verify, restore, and manage Pro subscription entitlements.
Deliver account verification, password reset, care-team invitation, support, privacy, and other service communications.
Respond to support, privacy, and account requests.
Maintain, secure, troubleshoot, test, analyze, and improve the app and website.
Detect misuse, fraud, security incidents, and violations of our Terms of Use.
Comply with law and protect users, Chalice Health, Pocket Med List, and others.
We do not use Consumer Health Data to determine insurance eligibility, employment, credit, housing, or access to medical care. The app may use the information you enter to provide reminders and informational prompts, but it does not make medical decisions for you.
4. How we disclose information
We may disclose information in the following circumstances.
A. At your direction
We disclose information to caregivers or care-team members you invite, as described by the permission settings and sharing screens in the app. The account owner can remove a care-team member in the app. An invited member can decline an invitation or leave an accepted care connection without deleting their own account. Separate report-sharing permissions are controlled by the account owner. A recipient may retain information they previously exported, copied, photographed, printed, or saved outside Pocket Med List; we cannot retrieve copies held outside our systems.
B. To service providers
We use service providers to operate Pocket Med List. Depending on the features and platform you use, these providers may include:
Google Firebase and Google Cloud for authentication, database, server functions, notifications, security, and related infrastructure; Google Analytics for Firebase for Android app usage analytics.
Resend for account verification, password reset, care-team invitation, and other service email delivery.
RevenueCat for subscription offerings, receipt validation, purchase history, entitlement status, and purchase restoration.
Apple App Store and Google Play for sign-in, app distribution, billing, subscription management, and transaction records.
RxNorm and medication-information services to return standardized medication names and strengths.
Netlify for the public website, and providers that help us deliver support communications, security, and technical operations. Our website loads fonts from Google Fonts, which receives the network request needed to deliver those fonts.
These providers may process information on our behalf or as independent platform providers under their own terms and privacy policies. We require service providers acting on our behalf to use information for authorized purposes and to protect it appropriately.
C. For legal, safety, and security reasons
We may disclose information if we reasonably believe disclosure is required by law, legal process, or a valid government request, or is reasonably necessary to protect rights, safety, security, or property; investigate fraud or misuse; enforce our agreements; or respond to an emergency. Pocket Med List is not an emergency monitoring service and should not be used to request emergency assistance.
D. Organizational changes
If Chalice Health, Pocket Med List, or relevant assets are involved in a merger, financing, reorganization, transfer, or similar transaction, information may be reviewed or transferred subject to appropriate confidentiality and continued protection obligations. We will provide notice when required by law.
E. Aggregated or de-identified information
We may use or disclose information that has been aggregated or de-identified so that it cannot reasonably be linked to you, for lawful operations, measurement, reporting, research, or service improvement. We do not attempt to re-identify de-identified information except to test our de-identification methods or as permitted by law.
5. Consumer Health Data notice
Pocket Med List may collect Consumer Health Data described in Section 1, including medications, allergies, adherence and activity history, blood-pressure readings, blood-glucose readings, and information inferred from those records for app features such as reminders, summaries, and reports.
We collect Consumer Health Data from you and, when you authorize it, from a caregiver or care-team member. We use it to provide the features you request, maintain and secure the service, respond to you, and comply with law.
The categories of information and recipients depend on the feature you use:
Account identifiers, contact information, medication records, health readings, activity history, reports, preferences, and related technical records may be processed by Google Firebase and Google Cloud to authenticate users, store and synchronize records, deliver notifications, operate app features, and protect the service.
Email addresses, names, and invitation or account-action details needed for a message may be processed by Resend to deliver account verification, password reset, care-team invitation, and other service emails.
Medication search terms and selected standardized results may be processed by RxNorm or similar medication-information services to return medication names and strengths.
Subscription identifiers, selected products, transactions, receipts, and entitlement status may be processed by RevenueCat, Apple, and Google to offer, verify, restore, and manage subscriptions.
Medication and health information selected by an account owner may be disclosed to the caregiver or care-team member the owner authorizes, subject to the permission controls presented in the app.
We do not sell Consumer Health Data. We do not disclose Consumer Health Data for cross-context behavioral advertising. Where applicable law requires consent for a particular collection or disclosure, we will request that consent separately. You may withdraw sharing permission prospectively by removing care-team access or changing available report-sharing permissions in the app, subject to the limitations described above.
6. Subscriptions and payments
Apple and Google process subscription payments. RevenueCat helps us verify transactions and maintain subscription access. Those companies may maintain their own transaction and account records under their privacy policies and legal obligations. Cancelling a subscription stops future renewals as provided by the applicable app store; it does not automatically delete your Pocket Med List account or health information. Deleting your Pocket Med List account does not automatically cancel a subscription purchased through Apple or Google.
7. Notifications, exports, and device controls
Medication reminders and other notifications may appear on your device's lock screen, depending on your device settings. You control notification permissions and preview settings through the app and your device. If you export, print, download, email, text, or otherwise share a medication list, health report, or other record, the copy is handled by the destination you select and may no longer be protected by Pocket Med List.
8. Data security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls and encryption in transit. No system is completely secure, and we cannot guarantee absolute security. Protect your device and account, use a strong device passcode, keep your software current, and promptly contact us if you believe your account has been accessed without authorization.
9. Retention and deletion
We generally retain account and Consumer Health Data while your account is active and as needed to provide the service. You can request deletion in the app through Profile > Delete account or at pocketmedlist.com/delete-account.
We aim to permanently delete the account data controlled by Chalice Health through Pocket Med List within 30 days after a verified deletion request, unless retention is required or permitted for security, fraud prevention, dispute resolution, tax, accounting, legal, or regulatory purposes. Limited information may remain temporarily in protected backups until those backups are overwritten. Aggregated or de-identified information may be retained where lawful.
App stores and service providers may retain transaction, security, or compliance records under their own policies. Deletion also cannot remove copies that you or an authorized recipient previously exported or saved outside Pocket Med List.
10. Your choices and privacy rights
Subject to applicable law, you may be able to:
Access, review, correct, or delete information in the app.
Request a copy of information associated with your account.
Remove care-team access, change available report-sharing permissions, or leave a care connection.
Turn notifications off or change how notification previews appear.
Manage or cancel a Pro subscription through Apple or Google.
Ask us to confirm whether we process your personal information or Consumer Health Data.
Request access, correction, deletion, or withdrawal of consent for certain processing.
Appeal a decision we make about a privacy request, where applicable.
To exercise a privacy right, email info@pocketmedlist.com with the subject "Privacy Request." We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization. We will not discriminate against you for exercising a privacy right.
If we deny your request and applicable law gives you a right to appeal, email info@pocketmedlist.com with the subject "Privacy Appeal." Identify the decision you are appealing and explain why you believe it should be reconsidered. We will review and respond within the period required by applicable law.
11. Children's privacy
Pocket Med List is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. A parent or legal guardian may maintain a dependent's medication information through the adult's account. If you believe a child under 13 created an account or provided information directly, contact us so we can investigate and take appropriate action.
12. U.S. operation and international users
Chalice Health operates Pocket Med List from the United States. If you use the service from another country, information may be transferred to and processed in the United States or other places where our service providers operate, subject to applicable safeguards and law.
13. Medical and HIPAA notice
Pocket Med List is a consumer medication-organization and health-recording tool. It does not provide medical advice, diagnosis, treatment, prescribing, pharmacy services, emergency response, or continuous patient monitoring. Always follow instructions from a qualified health professional and use a properly calibrated medical device for blood-pressure or blood-glucose measurements. Call 911 or your local emergency number for an emergency.
HIPAA applies to certain health plans, health care providers, health care clearinghouses, and their business associates. Your information in Pocket Med List is not necessarily protected by HIPAA merely because it relates to health. If we provide a separate service on behalf of a HIPAA-covered entity, different terms or notices may apply to that service.
14. Changes to this policy
We may update this Privacy Policy as Pocket Med List changes. We will update the effective date and provide additional notice in the app, by email, or through another appropriate method when required by law or when a change is material. If consent is required for a new use or disclosure of Consumer Health Data, we will request it before that use or disclosure.
15. Contact us
Pocket Med List
Operated by Chalice Health
PO Box 265
Midlothian, TX 76065
United States
Email: info@pocketmedlist.com
Website: pocketmedlist.com