Privacy Policy

What we collect

TolRx stores only what you explicitly provide:

• Your email address (used to identify your account and to send the emails described below)
• Your password, stored as a one-way bcrypt hash - we never see the plain text. If you sign in with Google, no password is stored
• The medications you add to your list, including any nicknames and symptom notes
• Your trigger markings (confirmed, suspected, safe) and any notes or context attached to them
• Your reaction journal entries - the dates, severity, symptoms, and which medications you linked to each reaction
• The conditions you select (MCAS, EDS, POTS, Celiac) and your current "context" if you set one
• Any additional profiles you create (for example, to track a family member), each with its own name and data
• Caregiver relationships - who you have granted access to, and any profiles shared with you
• Any feedback you submit through the app
• Your theme preference, stored only in your browser's localStorage

If you sign in with Google, we receive only your email address from Google. No other Google profile data is stored.

How we use your data

Your data is used solely to provide the TolRx service to you:

• To show you your medication list, trigger history, and reaction journal
• To flag ingredients against your personal trigger list
• To check for FDA recalls on medications you have saved
• To send you account emails: address verification, password resets, caregiver invitations, and FDA recall alerts

We do not sell your data. We do not share it with third parties except where required by law, to deliver the service (for example, the email provider used to send the emails above), or with people you have explicitly chosen to share it with (see Caregivers and Sharing).

Caregivers and sharing

TolRx lets you share your data with people you choose:

• You can invite a caregiver by email to access one of your profiles. You decide whether they have view-only or edit access, and you can change or revoke that access at any time from your Profiles page. A caregiver you invite can see the medications, triggers, and reaction journal on the profile you shared.
• If you accept a caregiver invitation, you will be able to view (and, if granted, edit) the inviting person's profile data. Only accept invitations from people you trust.
• You can generate a public, read-only link to a "safe medications" list. Anyone who has the link can view that list without signing in. You can revoke the link at any time, after which it stops working.

Third-party services

Medication data is fetched from the FDA openFDA API and NIH DailyMed. These requests contain drug names or NDC codes only - no personal information is sent to these services. Google Sign-In is an optional authentication method governed by Google's own privacy policy. Emails are delivered through a third-party email provider; only the recipient address and the message itself are shared with them.

Your rights

You can export, delete, or permanently remove your account at any time from your Profile page. Deleting your account removes your stored data, including your profiles, reaction journal, and any caregiver grants you created.

Contact

Questions about this policy? Contact us.