Your privacy, stated plainly.

This policy explains what information Rubrica Medical, Inc. ("Rubrica," "we") collects through the Rubrica application and website at rubricamedical.com, how we use it, and the choices you have. Rubrica is a clinical policy-reference and prior-authorization decision-support tool for healthcare professionals.

No patient health information

Rubrica is not designed to receive or store Protected Health Information (PHI). Lookups run against public payor-policy reference material. Where the app lets you label a saved check, we ask you to use non-identifying references only (for example, initials and date-of-birth month). Please do not enter patient names, medical record numbers, or other identifying patient data.

Information we collect

Account information. When you create an account we collect your email address and the account details you provide (such as your organization, role/user type, and name or professional credential). Your email address is your account identifier and is linked to your account.

Content you create in the app. Saved checks, preferences, activity (your recent policy lookups), issue reports you submit, and any policy-update digest topics you subscribe to. This content is associated with your account.

Usage analytics. We use Plausible Analytics, a privacy-friendly service that measures aggregate site usage without cookies and without collecting personal or cross-site tracking data.

On-device app state. The mobile app stores small preferences (such as your last-selected state and view) on your device to improve the experience. This stays on your device and is not transmitted by the app shell. Face ID / Touch ID, where used, is evaluated by your device's operating system — Rubrica never receives your biometric data.

How we use information

We use your information to operate and secure the service: to authenticate you, provide the policy-check and account features, respond to issue reports, send any digests you opt into, and understand aggregate product usage so we can improve Rubrica. We do not use your data for third-party advertising, and we do not track you across other apps or websites.

How we share information

We do not sell your personal information. We share it only with service providers that help us run Rubrica — our cloud database and authentication provider (Supabase) and our privacy-friendly analytics provider (Plausible) — and where required by law.

Deleting your account

You can permanently delete your account at any time from within the app: open Account settings → Delete account → Delete my account. This immediately and permanently deletes your account and the data associated with it (saved checks, preferences, activity, issue reports, and digest subscriptions). This action cannot be undone. If you need help, contact us at the address below.

Data security & retention

Data is encrypted in transit (HTTPS) and protected by access controls. We retain account data for as long as your account is active and delete it when you delete your account, except where retention is required by law.

Children

Rubrica is a tool for healthcare professionals and is not directed to children, and we do not knowingly collect information from children.

Changes & contact

We may update this policy and will revise the date above when we do. Questions or privacy requests: privacy@rubricamedical.com.