Privacy Policy

Last updated October 3, 2026

Who we are

SymptoRx ("we", "us") operates symptorx.com, a service that connects patients with licensed New York pharmacists for over-the-counter guidance. Questions about this policy go to support@symptorx.com.

What we collect

• Account details: your name, mobile phone number, email address, date of birth, gender, preferred language and home address, which you enter when you register. If you sign in with Google or Apple, we receive your name, email address and an account identifier from them; we never see your Google or Apple password.
• Health information you give us: the category and description of what you are asking about, any photo you attach, your answers to the health screening questions, and the messages you exchange with a pharmacist.
• Sign-in codes: when you sign in with your phone number we text you a one-time code. The code expires after ten minutes.
• Technical data: the server logs the time and network address of requests to keep the service working and secure.

How you sign in

You choose how to sign in. Each way gives us only what we need to know it is you.

• Google: Google tells us your name, your email address, whether Google has confirmed that address, and an account identifier. We never see your Google password, and we do not read your mail, contacts or files.
• Your device's screen lock (Face ID, Touch ID, a fingerprint, Windows Hello or your device PIN; this kind of sign-in is also called a passkey): your phone or computer checks your face, fingerprint or PIN by itself. Your face and fingerprint data never leave your device. SymptoRx never receives, sees or stores them. We keep only a public key, which cannot open your account by itself, a name for the device, and the dates it was added and last used. Depending on your device, Apple, Google or your password manager may copy the saved sign-in to your other devices.
• Email codes: we email a one-time 6-digit code to the address you give us. The code expires after ten minutes and works only in the browser that asked for it. We keep the address and the date you confirmed it.
• Text codes: we text a one-time 6-digit code to your mobile number, as described under Text messages below.

To keep your account private we record the time, network address and type of browser of your sign-ins, and we sign you out after 20 minutes without activity (longer while a request is open) and after one day at most. In Profile, under Sign-in and security, you can see the ways you sign in, add or remove one, and sign out of all devices.

If you lose every way to sign in, write to support@symptorx.com. Before we help you back in, we confirm who you are by calling the mobile number on your account and checking details from your account. We never add a way to sign in on a caller's word alone.

How we use it

• To show your request to available pharmacists so one can accept it and consult with you.
• To let the pharmacist see your health screening answers and contact details during the consult.
• To keep a record of your past consults and recommendations in your account.
• To send you sign-in codes and service messages. We do not send marketing messages.

Who sees it

The pharmacist who accepts your request sees your name, age, contact details, health screening answers and messages for that consult. We do not sell your information. We share it only with service providers that help run SymptoRx (hosting, text-message and email delivery, sign-in providers you choose), and when the law requires it.

Health information

We treat the health information you share as confidential and limit access to the pharmacist handling your consult and the staff who maintain the service. Please do not share more than you need to for your question.

How long we keep it

Your account and consult history stay until you ask us to delete them. Sign-in codes are deleted as soon as they are used or expire.

Text messages

If you give us your mobile number and tick the SMS consent box, we text you one-time sign-in codes from SymptoRx. Message frequency varies with how often you sign in; standard message and data rates may apply. Reply STOP to any message to opt out and START to opt back in; reply HELP or email support@symptorx.com for help. We will not share your mobile phone number or your SMS consent with third parties or affiliates for marketing or promotional purposes. Mobile numbers are used only to deliver the codes and service messages you request.

Your choices

• You can update your details from the Profile screen at any time.
• You can add or remove a way to sign in, and sign out of all devices, from Profile under Sign-in and security.
• You can ask us to delete your account and its history by emailing support@symptorx.com from the email address on the account.
• If you signed in with Google or Apple you can also remove SymptoRx from your Google or Apple account settings.

Children

SymptoRx is for adults. A parent or guardian may ask about a child using their own account.

Changes

If this policy changes we will post the new version here with a new date.

This policy is a first version. It will be reviewed by counsel before SymptoRx opens to the public and may change.