Legal

Privacy Policy

Last updated: October 23, 2026

1Rx ("we", "our") provides cloud-based delivery management software for pharmacies. This policy explains what information we collect, how we use and protect it, and the rights available to you. The essentials: your data is hosted on servers located in Canada and is never sold or shared for commercial purposes — it is only used to provide the service to your pharmacy. Our approach is aligned with PIPEDA and the applicable provincial laws, including Quebec's Law 25 (the standard-by-standard detail is on the Security page).

1. Information we collect

• Pharmacy account: pharmacy name, contact details, login credentials.
• Delivery data: recipient name, address, phone number, delivery instructions.
• Patient mobile phone number when the patient consents to receive SMS notifications.
• Technical data: usage logs and IP address, for security and reliability purposes.

2. SMS notifications

When a patient consents, we send transactional delivery notifications (for example: scheduled delivery, driver on the way, order ready). Consent is collected by the pharmacy at the point of service; it is optional and is never a condition of obtaining a service.

• Message frequency varies depending on your deliveries.
• Standard message and data rates may apply.
• Reply STOP at any time to unsubscribe; HELP for assistance.
• No health information (medication name, diagnosis) is transmitted by SMS.

3. Use of information

We use the information solely to operate the delivery service, send consented notifications, and ensure security, support and billing. We do not use patient data for marketing purposes.

4. Sharing with service providers

We rely on service providers strictly necessary for operations, in particular Telnyx (SMS transmission) and our cloud hosting provider. These providers are only authorized to process data on our behalf and according to our instructions. Data is hosted in Canada.

5. Retention and security

Information is kept for as long as necessary to provide the service and comply with legal obligations, then deleted or anonymized. We apply technical and organizational measures (encryption in transit, access control, logging).

6. Your rights

You may request access to your information, its correction or deletion, withdraw your consent (including for SMS, by replying STOP) and file a complaint. To exercise your rights, write to support@1rx.ca. If you are not satisfied with our response, you may contact Quebec's Commission d'accès à l'information.

Drivers: the steps to have your account and its associated data deleted are detailed on the Delete your driver account page.

7. Mobile apps for delivery drivers

Subscribing pharmacies may provide their drivers with our mobile apps (iOS and Android). They process the same delivery data as the web service, with the following specifics:

• Location: during an active route only (at least one delivery in progress), the app sends the driver's position to their pharmacy: as soon as the route starts, then at least every 12 minutes, and every 5 minutes when the driver is running late on a stop's promised time. Sending continues while the app is in the background or the screen is off. The pharmacy uses it to follow the route's progress and spot delays; depending on the plan, the position is also used to re-sequence the remaining stops. No tracking outside a route. The server keeps only each driver's latest known position. On iPhone, the position is also recorded at the moment of a proof of delivery, a transfer or a return, to document that action. The web driver interface, offered as a backup option, sends the position continuously after "I'm leaving", as long as the page stays open.
• Proof of delivery: photos and signatures collected when the pharmacy requires them, transmitted to the pharmacy and kept with the delivery record.
• Offline copy: the day's deliveries are stored on the device so work can continue without a network connection, protected by the device's own mechanisms (screen lock, system encryption), then synchronized once connectivity returns.
• Notifications: operational local notifications only (e.g. a stop added to the route). No advertising notifications.
• No ads, no third-party trackers and no sale of data within the apps.

8. Changes

We may update this policy; the update date above reflects the version in effect.

9. Contact us

For any question relating to privacy: support@1rx.ca.