Privacy Policy

Last updated: 10 October 2026

ProtonRx ("we", "the app") is a prescription and chamber management app for registered doctors in Bangladesh. This policy explains what information the app handles, where it is kept and the choices you have.

Who is responsible for patient data

You, the doctor, decide what patient information to record and are responsible for it as its controller. ProtonRx only stores and processes it so that the app works for you, and never uses it for any other purpose.

Information we handle

Your account: name, email address, BMDC registration number and mobile number, given when you register.
Patient and clinical records: patients, prescriptions, serials, chambers, templates and settings that you enter.
Photos and files: your photo, patient photos and patient files (reports, X-rays).
Subscription and payments: plan, validity and payment records. Card, bKash and Nagad details are entered with SSLCommerz and never reach ProtonRx.
Technical information: app version, last active time and a notification token so the app can receive notifications.

Where your data is kept

On your phone: all records are stored on your device and the app works offline.
Cloud backup (Pro): patients, prescriptions, serials, chambers, templates and settings are backed up to Google Firebase (Cloud Firestore) in your private account space. Photos and patient files are never uploaded; they stay on your phone and in backup files you create.
Backup files: a backup file you create contains all your data including photos and files. Keep it somewhere safe; anyone who has the file can read it.

How information is used

To provide the app: writing and printing prescriptions, serials, reminders, backup and restore.
To manage your subscription and verify payments.
To send service notifications (for example subscription expiry or important updates).
To provide support when you contact us.

We do not sell your data, show advertising, or use patient information for analytics or marketing.

Services we rely on

Google Firebase: sign-in, cloud backup and push notifications.
Cloudflare: our payment and administration server.
SSLCommerz: payment processing.
Your SMS provider (BulkSMSBD, Alpha SMS or BDWebs): serial and reminder messages are sent from your phone through your own SMS account.
WhatsApp: only when you choose to share a prescription with a patient.

What our administrators can see

Account details (name, email, BMDC number, mobile), subscription and payment status, last active time and the number of records in your backup. Administrators do not read your patients' clinical records.

Security

Access is protected by your account login and Firebase security rules. Payments are verified on our server with SSLCommerz. Please protect your phone with a screen lock, because records are stored on it.

Retention and deletion

Data on your phone stays until you delete it or uninstall the app. Cloud backups are kept while your account exists. You can delete your account at any time in Settings → Account → Delete account: your account, sign-in and cloud backup are deleted immediately. Without the app, request deletion at protonrx-9737b.web.app/delete-account.html and we will delete it within 30 days. Payment records are kept for up to 5 years as required for accounting.

Children

ProtonRx is intended for doctors only. Patient records of children are entered by their doctor.

Changes

We may update this policy. The latest version is always available in the app and on our website.

Contact

WhatsApp support: 01822616361