Privacy Policy

1. Our Privacy Principles

At HealthBook, privacy is a core design principle rather than an afterthought. Every feature is developed with the goal of giving users greater control over their personal health information.

Our commitment is based on the following principles:

Your information belongs to you.

Your health information remains under your control. You decide what information you provide and what information you choose to share with members of your Care Circle.

We never sell your personal or health information.

Nexilence does not sell, rent, trade, or monetize your personal information or your health information.

We strive to collect only the information reasonably necessary.

We collect information necessary to provide, secure, improve, and support the Services while minimizing unnecessary data collection wherever reasonably possible.

Security is built into our platform.

We protect your information using industry-standard security controls including encryption, secure authentication, access controls, monitoring, and secure cloud infrastructure.

Transparency matters.

We explain what information we collect, why we collect it, how we use it, and the choices available to you.

You remain in control.

Subject to applicable laws, you may request access to your information, correct inaccuracies, export your information, or request deletion of your account.

2. Scope of this Privacy Policy

This Privacy Policy applies to all users of:

• HealthBook mobile applications
• https://www.rxbott.com
• Any related websites operated by Nexilence
• Customer support interactions
• AI-powered features available through the Services
• Care Circle functionality
• Any future services that expressly reference this Privacy Policy

This Privacy Policy does not apply to third-party websites, healthcare providers, pharmacies, or services that are not owned or controlled by Nexilence.

3. Eligibility

HealthBook is intended for users who are 13 years of age or older.

The Services are not directed toward children under the age of 13, and we do not knowingly collect personal information directly from children under 13. If we become aware that personal information has been collected from a child under 13 without appropriate authorization where required by law, we will take reasonable steps to delete such information.

Parents or legal guardians who believe a child has provided personal information should contact us at admin@nexilence.co.

4. Information We Collect

Depending on how you use HealthBook, we may collect different categories of information.

4.1 Account Information

When creating an account, we may collect information including:

• Full name
• Email address (if provided by your sign-in provider)
• Profile photograph (if available)
• User identifier
• Date of birth
• Gender
• Country or region
• Preferred language

You may create an account using:

• Google Sign-In
• Sign in with Apple

We receive only the information that you authorize your identity provider to share with us.

4.2 Health Information

Because HealthBook is a health management platform, you may voluntarily provide information including:

• Medication records
• Medicine schedules
• Dosage information
• Prescription details
• Prescription refill reminders
• Health notes
• Symptoms
• Health updates
• Treatment history
• Medicine adherence information
• Doctor instructions that you choose to store
• Medical observations entered by you

We treat this information as sensitive personal information and apply enhanced security measures appropriate to the nature of the information.

4.3 Prescription Images

If you choose to upload prescriptions, we may collect:

• Images of prescriptions
• Documents containing medication information
• Images uploaded from your device
• Images captured using your device camera

Prescription images are processed solely for providing requested features within HealthBook, such as organizing prescriptions, medicine management, and AI-assisted understanding of your uploaded information where applicable.

We do not sell or license your prescription images.

4.4 Care Circle Information

HealthBook allows users to voluntarily connect with trusted family members or caregivers using the Care Circle feature.

Depending on how you use Care Circle, we may process:

• Care Circle invitations
• Relationship information
• Shared medication information
• Shared health updates
• Shared reminders
• Care Circle membership information
• Permissions selected by the account owner

Information is shared with Care Circle members only when explicitly authorized by the primary account holder.

Users remain responsible for determining what information they choose to share.

4.5 Location Information

If you grant permission, HealthBook may collect location information to support features such as:

• Finding nearby pharmacies
• Improving location-based recommendations
• Regional medicine availability
• Location-based reminders where applicable

Location permissions may be disabled at any time through your device settings.

Certain features may become unavailable if location permissions are revoked.

4.6 Device Information

We automatically collect certain technical information necessary for operating and securing the Services, including:

• Device model
• Operating system
• App version
• Device identifiers
• Language settings
• Time zone
• IP address
• Diagnostic information
• Crash reports
• Performance metrics
• Security logs

This information helps us maintain the reliability, performance, and security of the Services.

4.7 Usage Information

We collect information about how users interact with the Services, including:

• Features used
• Screens visited
• Session duration
• User preferences
• Navigation patterns
• Interaction events
• Notification interactions
• Feature usage statistics

This information helps us understand how users interact with HealthBook and enables us to improve usability and product performance.

4.8 Contacts Information

If you grant permission, HealthBook may access selected contact information solely for enabling Care Circle features and facilitating medicine ordering through integrations such as WhatsApp where initiated by you.

We access only the information necessary to perform the requested function.

You may revoke Contacts permission at any time through your device settings.

4.9 Camera Access

With your permission, HealthBook may access your device camera to allow you to:

• Capture prescription images
• Upload medicine labels
• Scan relevant health documents
• Capture other health-related information that you choose to store

Camera access is used only when you actively initiate these features.

4.10 Notification Information

If enabled, HealthBook may send notifications related to:

• Medication reminders
• Prescription refill reminders
• Health reminders
• Care Circle updates
• Security alerts
• Important account notifications
• Service announcements

You may manage notification preferences through your device settings or within the application where available.

5. AI-Powered Features

HealthBook includes AI-powered features designed to assist users in organizing, understanding, and managing health-related information.

When you voluntarily use AI features, information that you submit may be processed using artificial intelligence technologies provided by Nexilence or trusted third-party AI service providers acting on our behalf.

AI features may help users:

• Understand medicine information
• Organize prescription details
• Summarize uploaded health information
• Provide medication-related guidance
• Answer health management questions
• Improve accessibility of stored health information

AI-generated responses are intended solely for informational and educational purposes.

AI-generated content is not a substitute for professional medical advice, diagnosis, or treatment.

Users should always consult qualified healthcare professionals before making medical decisions or changing medications.

Nexilence does not guarantee the completeness, accuracy, or suitability of AI-generated responses for any particular medical situation.

We continuously evaluate and improve our AI systems to enhance safety, reliability, and usefulness while protecting user privacy.

6. How We Use Your Information

We process your information only for legitimate purposes consistent with this Privacy Policy and applicable laws. Depending on how you use the Services, we may use your information to:

6.1 Provide the Services

We use your information to:

• Create and maintain your HealthBook account.
• Authenticate your identity and enable secure access.
• Store and organize your medication records.
• Manage prescription images and medicine information.
• Generate medication schedules and reminders.
• Enable Care Circle functionality.
• Allow you to share information with authorized family members or caregivers.
• Synchronize your information securely across supported devices.
• Provide medicine ordering features where available.
• Deliver customer support.

6.2 Improve the Services

We continuously improve HealthBook by using information to:

• Understand how users interact with the application.
• Identify frequently used features.
• Improve usability and accessibility.
• Optimize application performance.
• Fix software defects.
• Improve AI-powered features.
• Develop new features and functionality.
• Enhance reliability and security.

Where practical, we use aggregated or de-identified information for analytics and product improvement.

6.3 AI-Powered Assistance

When you choose to use AI-powered functionality, we may process your submitted information to:

• Interpret prescription information.
• Organize medication data.
• Generate summaries.
• Provide medication-related explanations.
• Improve user interactions.
• Answer health management questions.

We strive to minimize the information processed by AI systems and use appropriate safeguards to protect your privacy.

AI-generated responses are intended to assist users and should not replace advice from qualified healthcare professionals.

6.4 Safety and Security

We use information to:

• Detect unauthorized access.
• Prevent fraud and abuse.
• Monitor suspicious activity.
• Protect user accounts.
• Maintain system integrity.
• Investigate security incidents.
• Comply with legal obligations.

6.5 Communications

We may contact you regarding:

• Important account updates.
• Security notifications.
• Medication reminders.
• Care Circle activity.
• Changes to our Services.
• Updates to this Privacy Policy.
• Customer support responses.

We do not send third-party advertising or promotional communications unrelated to HealthBook without your consent where required by law.

7. Information We Do Not Sell

We believe health information should never become a commercial product.

Accordingly:

• We do not sell your personal information.
• We do not sell your prescription images.
• We do not sell your medication records.
• We do not sell your health updates.
• We do not sell Care Circle information.
• We do not rent personal information to advertisers.
• We do not monetize your health information.

Our business is built around providing digital health services, not selling user data.

8. When We Share Information

We share information only in limited circumstances.

8.1 With Your Consent

We may share information when you expressly request or authorize us to do so.

Examples include:

• Sharing health information with members of your Care Circle.
• Sending medicine information through WhatsApp when initiated by you.
• Exporting information that you request.

8.2 Service Providers

We work with carefully selected service providers that help us operate the Services.

These providers process information only on our behalf and only as necessary to perform their services.

Examples include:

• Secure cloud infrastructure.
• Authentication services.
• Push notification delivery.
• Analytics.
• Crash reporting.
• AI processing.
• Customer support infrastructure.

These providers are contractually required to protect your information and may not use it for their own marketing purposes.

8.3 Legal Requirements

We may disclose information if we reasonably believe disclosure is necessary to:

• Comply with applicable law.
• Respond to lawful government requests.
• Enforce our Terms of Service.
• Protect user safety.
• Prevent fraud.
• Protect the rights or property of Nexilence.
• Investigate security incidents.

8.4 Business Transactions

If Nexilence undergoes a merger, acquisition, investment, restructuring, financing, or sale of assets, user information may be transferred as part of that transaction, subject to appropriate confidentiality obligations and applicable law.

Users will be notified where required.

9. Third-Party Services

HealthBook uses trusted third-party providers to deliver and improve the Services.

These providers process information only as necessary for the services they provide.

Firebase Authentication

Used for:

• Google Sign-In
• Sign in with Apple
• Secure authentication
• User identity management

Cloud Firestore

Used to securely store application data including user information, medication records, Care Circle information, and other information that you choose to store.

Firebase Storage

Used for secure storage of:

• Prescription images
• Uploaded documents
• Health-related media

Firebase Cloud Messaging

Used to deliver:

• Medication reminders
• Prescription reminders
• Security notifications
• Important service updates

Google Analytics

Used to understand:

• Application usage.
• Feature adoption.
• Performance trends.
• Product improvements.

Analytics information is used to improve the Services and user experience.

Firebase Crashlytics

Used to:

• Detect crashes.
• Diagnose technical problems.
• Improve application stability.
• Improve reliability.

Crash reports may include limited diagnostic information necessary to identify software issues.

AI Service Providers

HealthBook may use trusted artificial intelligence providers to enable AI-powered functionality.

Information submitted to AI features may be processed to generate responses requested by you.

We select providers that maintain appropriate security and privacy practices.

WhatsApp Integration

If you choose to order medicines through WhatsApp, HealthBook may prepare messages containing medication information that you choose to send.

Messages are sent only after your explicit action.

Once communication occurs within WhatsApp, it becomes subject to WhatsApp's own privacy practices and terms.

10. International Data Transfers

HealthBook is operated by Nexilence, a company registered in India.

To provide secure, reliable, and resilient services to users worldwide, HealthBook stores user data within secure cloud infrastructure located in the European Union.

Our primary storage infrastructure includes:

• Cloud Firestore (European Multi-Region - eur3)
• Cloud Storage (European Multi-Region - EU)

Users located outside the European Union acknowledge that information may be transferred to and processed within the European Union.

Where required by applicable law, we implement appropriate safeguards designed to protect personal information during international transfers.

11. Data Storage

Your information is stored using secure cloud infrastructure designed for high availability, resilience, and disaster recovery.

We use geographically distributed cloud services within the European Union to improve reliability and availability.

Health-related information, including prescription images and medication records, is stored using encrypted cloud storage with appropriate access controls.

Only authorized systems and personnel with a legitimate business need are permitted access to personal information.

12. Legal Basis for Processing

Where applicable under laws such as the General Data Protection Regulation (GDPR), we process personal information based on one or more of the following legal grounds:

Consent

Where you voluntarily provide information or enable optional features, such as:

• Care Circle sharing.
• AI-powered assistance.
• Location services.
• Camera access.
• Contacts access.
• Notifications.

You may withdraw consent at any time by adjusting your settings or contacting us, although doing so may limit certain functionality.

Performance of a Contract

We process information necessary to provide the Services you request, including account management, medication tracking, reminders, and synchronization.

Legitimate Interests

We process certain information where necessary for our legitimate interests, including:

• Improving the Services.
• Maintaining security.
• Detecting fraud.
• Diagnosing technical issues.
• Enhancing performance.
• Providing customer support.

We balance these interests against your rights and freedoms.

Legal Obligations

We may process information where necessary to comply with applicable laws, regulations, legal processes, or lawful requests from competent authorities.

We process personal information only for the purposes described in this Privacy Policy and only to the extent reasonably necessary to provide, secure, and improve the Services.

13. How We Protect Your Information

Protecting your information is fundamental to how HealthBook is designed and operated. We implement technical, administrative, and organizational safeguards intended to protect personal and health information from unauthorized access, disclosure, alteration, loss, or destruction.

Our security program includes, where appropriate:

• Encryption of data during transmission using secure industry-standard protocols.
• Encryption of data at rest within our cloud infrastructure.
• Secure authentication mechanisms.
• Role-based access controls.
• Least-privilege access principles.
• Continuous infrastructure monitoring.
• Audit logging.
• Security event monitoring.
• Regular software updates and security patches.
• Disaster recovery procedures.
• Secure backup processes.
• Internal security reviews and risk assessments.

Although we take commercially reasonable steps to protect your information, no method of transmission or electronic storage can be guaranteed to be completely secure. Users are encouraged to protect their account credentials and promptly notify us of any suspected unauthorized access.

14. Data Retention

We retain personal information only for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Active Accounts

Information associated with an active account is retained while your account remains active and while necessary to provide the Services.

Account Deletion

When you request deletion of your HealthBook account:

• Your account is immediately deactivated.
• Access to your account is removed.
• Personal information is scheduled for permanent deletion.
• Personal information is permanently deleted from our active systems within 30 days.

Backup Systems

Encrypted backup copies may temporarily retain deleted information for up to 30 days as part of routine disaster recovery processes.

Backup information is not used to restore deleted accounts except where necessary to maintain system integrity or recover from catastrophic service failures.

Following the backup retention period, deleted information is permanently removed or overwritten.

Legal Retention

Where required by applicable law, regulation, court order, or legal process, Nexilence may retain limited information for the period required to comply with such obligations.

15. Why We Retain Information After Account Deletion

A limited retention period helps us:

• Recover from accidental account deletions.
• Maintain backup integrity.
• Detect and investigate fraud or abuse.
• Protect the security of our platform.
• Comply with applicable legal obligations.

After the applicable retention period expires, your personal information is permanently deleted or anonymized and can no longer be associated with you.

16. Your Privacy Rights

Depending on your location and applicable law, you may have certain privacy rights.

These rights may include the ability to:

• Access your personal information.
• Obtain a copy of your information.
• Correct inaccurate information.
• Update incomplete information.
• Delete your account.
• Request deletion of personal information.
• Withdraw consent where processing is based on consent.
• Restrict certain processing.
• Object to certain processing.
• Request portability of your information where applicable.
• Lodge a complaint with the relevant supervisory authority.

We may request additional information to verify your identity before processing privacy-related requests.

17. Rights of Users in the European Economic Area (GDPR)

If you are located within the European Economic Area, United Kingdom, or another jurisdiction where similar laws apply, you may have rights including:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to restrict processing.
• Right to data portability.
• Right to object.
• Right to withdraw consent.
• Right to lodge a complaint with a supervisory authority.

Where we rely on consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

18. Rights of Users in India

If you are located in India, Nexilence seeks to process personal information in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023, where applicable.

Subject to applicable law, you may request:

• Access to your personal information.
• Correction of inaccurate information.
• Deletion of personal information.
• Withdrawal of consent.
• Information regarding how your personal information is processed.

Requests may be submitted using the contact information provided at the end of this Privacy Policy.

19. Rights of California Residents

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

• The right to know what categories of personal information we collect.
• The right to request deletion of personal information.
• The right to correct inaccurate personal information.
• The right to access information regarding our processing activities.
• The right to non-discrimination for exercising your privacy rights.

HealthBook does not sell personal information and does not share personal information for cross-context behavioral advertising.

20. Children's Privacy

HealthBook is intended for users who are at least 13 years of age.

The Services are not directed toward children under the age of 13.

If we become aware that we have collected personal information directly from a child under 13 without appropriate authorization where required by law, we will take reasonable steps to delete such information promptly.

Parents or guardians who believe their child has provided information should contact us at admin@nexilence.co.

21. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Maintain website functionality.
• Improve user experience.
• Measure website performance.
• Understand aggregate usage patterns.
• Enhance security.

You may configure your browser to reject cookies. Certain website features may not function correctly if cookies are disabled.

The HealthBook mobile application may also use technologies necessary to maintain secure sessions and improve application performance.

22. Third-Party Links

The Services may contain links to third-party websites, pharmacies, healthcare providers, or other external services.

This Privacy Policy does not apply to those third-party services.

We encourage users to review the privacy policies of any third-party services they choose to access.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Applicable laws.
• Technology.
• Security practices.
• Business operations.
• Product functionality.

When material changes are made, we will update the "Last Updated" date at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice or obtain consent before such changes become effective.

Continued use of the Services after the updated Privacy Policy becomes effective constitutes acceptance of the revised Privacy Policy.

24. Contact Us

www.thehealthbook.appwww.thehealthbook.app If you have questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact us:

Nexilence

Website: https://www.rxbott.com

Support: https://www.rxbott.com/support.html

Email: admin@nexilence.co

Registered Office: India

If you wish to exercise your privacy rights or submit a request relating to your personal information, please contact us using the email address above. We will respond within the timeframe required by applicable law.

25. Our Promise

Health information is among the most personal information an individual can share.

At Nexilence, we recognize the responsibility that comes with building technology that helps people manage their health. We are committed to designing HealthBook with privacy, security, and transparency at its foundation.

We will continue to invest in technologies, processes, and practices that protect your information while enabling you to benefit from secure digital health services.

Our commitment is simple:

• We respect your privacy.
• We protect your information.
• We never sell your personal or health information.
• We are transparent about how your information is used.
• We continuously improve our security and privacy practices.

Thank you for trusting HealthBook with your health journey.