Compliant & Secure

Privacy & Data Governance Policy

Last updated: October 13, 2026. This policy outlines how Pharma Flow collects, anonymizes, protects, and allows management of user personal data.

Anonymized Surveys

Survey responses are stored cleanly with timestamps and latency metadata without personal identity tags.

Optional Personal Info

Phone numbers are strictly optional during registration to minimize unnecessary personal data collection.

Permanent Account Deletion

Users maintain absolute ownership of their profiles and can request or execute permanent account deletion at any time.

1. Information We Collect

To support clinical workflow research and pharmacist scheduling, Pharma Flow collects minimal operational data:

Account Identifiers: Name, Email address, and encrypted Password hash.
Optional Data: Phone Number (used solely for optional SMS operational alerts if provided).
Operational Metadata: Assigned shifts, shift confirmation timestamps, and survey submission latencies.

2. Anonymization of Survey Data

All survey responses submitted by pharmacists are completely anonymized in research data aggregation logs. Response logs present submission timestamps, completion latency, and conditional question dependency tracks while stripping away individual user identity tags.

3. App Store Compliance & Minimal Collection

In strict compliance with Apple App Store Review Guideline 5.1.1(v), Pharma Flow does not mandate non-essential personal information for core app functions. Phone numbers are designated as optional fields across both mobile and web registration channels.

4. Account Deletion & Right to be Forgotten

We respect your right to control your personal data. Users may permanently remove their accounts and all associated data at any time:

How to delete your account:

In the mobile application, navigate to the Profile Tab.
Scroll to Account Controls and tap Delete Account.
Confirm the deletion prompt. Your user record, shift assignments, messages, and linked submission logs will be permanently deleted via our DELETE /api/user/delete server endpoint.

5. Data Security & Storage

All user credentials and tokens are protected using standard industry encryption (bcrypt password hashing, JWT Bearer tokens, and HTTPS transport layer security). Database records are hosted in secure server environments with restricted access protocols.

Contact Privacy Team

If you have questions regarding data privacy or need manual assistance with data requests, please contact our administrative team at privacy@pharmaflow.org.