Version 2 · Effective October 15, 2026

Privacy Policy

This policy explains what MilliRx collects when you use the web app at app.millirx.com and its emails, how we use it, and the choices you have. We wrote it in plain words. If anything is unclear, write to hello@millirx.com.

1. The short version

We collect what we need to run your account and the features you use.
We do not sell your information or use it for advertising.
We do not store or log what you type into search.
We do not record your screen or sessions.
We look at your notes and files only when you ask us to, when they are reported or seem to break our Terms of Service, to keep MilliRx secure, or when the law requires it.
MilliRx is not built for patient information. Please keep it out.

2. What we collect

Account details. Your name, email address, and password (stored by our sign-in provider as a one-way hash). If you sign in with Google, we receive your name, email address, and profile picture from Google.
Workplace details. The workplaces you belong to, your role in each, how you joined, and when.
What you create. Notes, tasks, flashcards, guideline links, Home layout, settings, and files you upload to Hard Drive.
What you read and use. Which MilliRx content, tools, and versions you open, with the time. This lets us offer continuing education credit for reading you already do. It is private to you and is never shown to your workplace.
Invitations. Your invite code, who joined with it, and the email addresses you ask us to invite.
Agreements. Which versions of our Terms of Service and this policy you accepted, and when.
Reports. If you report content, or content of yours is reported, we keep the report, what it is about, and what we did.
Technical details. Cookies that keep you signed in, and error logs we need to keep MilliRx working. Error logs do not include what you typed into search or the contents of your notes or files.

3. How we use it

To run MilliRx: sign you in, show your records, and keep your workplaces separate.
To send the emails the service needs: confirming your address, resetting your password, security notices, a welcome email, and invitations someone asked us to send.
To work out continuing education eligibility from your reading, once that program exists.
To keep MilliRx secure and to find and fix problems.
To enforce our Terms of Service, including checking reports and removing content that breaks them.
To understand which features are used, so we can improve them.

4. When we look at your content

Your personal notes, tasks, flashcards, and files are private to you unless you share them. MilliRx staff look at them only:

When you ask us for help and give us permission.
When someone reports them, or we have reason to believe they break our Terms of Service or the law.
When needed to keep MilliRx and the people who use it secure, for example to stop malware.
When the law requires it.

We may use automated tools to help find malware and illegal content. We report apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC), as US law requires.

Hard Drive makes its previews, including those of Word, Excel, and PowerPoint files, in your browser. Your files are not sent to an outside viewer.

5. Who can see your information

You. Everything in your account.
Your workplace admins. Your name, email address, role, and join date at their workplace, and the records you create for that workplace. Never your personal notes, tasks, flashcards, files, or reading history.
People you share with. Whatever you choose to share with them.
MilliRx staff. A small number of people who run and support MilliRx, when needed to operate the service, help you, or keep it secure, as section 4 describes.
Service providers. Companies that run parts of MilliRx for us, under contracts that limit what they may do with your information: Supabase (database, sign-in, and file storage), Vercel (hosting), Resend (email), and Google (if you sign in with Google, and when you search for an address in Locations, where the text you type goes to Google to suggest matches). If we turn on AI help for search, the text you type in search is sent to TypeSafe AI to choose the right answer; MilliRx does not store it.
When the law requires it. If we must respond to a valid legal request, report illegal content such as child sexual abuse material, or protect someone's safety or MilliRx's rights.

If MilliRx is ever sold or merged, your information would move with it under this policy, and we would tell you.

6. Patient information

MilliRx is not covered by a business associate agreement (BAA) today, so it must not hold protected health information. The app reminds you of this wherever you type or upload. If patient information reaches us anyway, we may delete it.

7. Cookies

We use cookies and similar storage only to keep you signed in and to remember choices such as your theme. We do not use advertising cookies.

8. How long we keep it

We keep your information while your account is open. When you delete your account in Settings, we delete your profile, personal records, and files. We keep a small record of administrative actions (for example, that a workplace admin changed a role) and of agreement acceptances, because they are needed for security and legal reasons. When we remove content under our Terms of Service, we may keep a copy and the report about it while an appeal is open, or as long as the law requires. Backups roll off on a schedule.

9. Your choices

See and change your name and email address in Settings.
Delete your account, and with it your data, in Settings.
Stop invitation emails with the link in any invitation.
Ask us for a copy of your information, or to correct or delete it, at hello@millirx.com. Depending on where you live, you may have more rights under state law; we honor them, and we will not treat you differently for using them.

10. Security

We use encrypted connections, access controls that keep each person's and each workplace's records separate, and the security features of our providers. No system is perfectly secure. If we learn of a breach that affects you, we will tell you as the law requires.

11. Children

MilliRx is for professionals and adult students. We do not knowingly collect information from anyone under 18.

12. Changes to this policy

When we change this policy in a significant way, we will ask you to read and accept the new version before you keep using MilliRx. Each version shows the date it was published.

13. Contact

Questions or requests about your privacy: hello@millirx.com.

1. The short version

We collect what we need to run your account and the features you use.

We do not sell your information or use it for advertising.

We do not store or log what you type into search.

We do not record your screen or sessions.

We look at your notes and files only when you ask us to, when they are reported or seem to break our Terms of Service, to keep MilliRx secure, or when the law requires it.

MilliRx is not built for patient information. Please keep it out.

2. What we collect

Account details. Your name, email address, and password (stored by our sign-in provider as a one-way hash). If you sign in with Google, we receive your name, email address, and profile picture from Google.

Workplace details. The workplaces you belong to, your role in each, how you joined, and when.

What you create. Notes, tasks, flashcards, guideline links, Home layout, settings, and files you upload to Hard Drive.

What you read and use. Which MilliRx content, tools, and versions you open, with the time. This lets us offer continuing education credit for reading you already do. It is private to you and is never shown to your workplace.

Invitations. Your invite code, who joined with it, and the email addresses you ask us to invite.

Agreements. Which versions of our Terms of Service and this policy you accepted, and when.

Reports. If you report content, or content of yours is reported, we keep the report, what it is about, and what we did.

Technical details. Cookies that keep you signed in, and error logs we need to keep MilliRx working. Error logs do not include what you typed into search or the contents of your notes or files.

3. How we use it

To run MilliRx: sign you in, show your records, and keep your workplaces separate.

To send the emails the service needs: confirming your address, resetting your password, security notices, a welcome email, and invitations someone asked us to send.

To work out continuing education eligibility from your reading, once that program exists.

To keep MilliRx secure and to find and fix problems.

To enforce our Terms of Service, including checking reports and removing content that breaks them.

To understand which features are used, so we can improve them.

4. When we look at your content

Your personal notes, tasks, flashcards, and files are private to you unless you share them. MilliRx staff look at them only:

When you ask us for help and give us permission.

When someone reports them, or we have reason to believe they break our Terms of Service or the law.

When needed to keep MilliRx and the people who use it secure, for example to stop malware.

When the law requires it.

Hard Drive makes its previews, including those of Word, Excel, and PowerPoint files, in your browser. Your files are not sent to an outside viewer.

5. Who can see your information

You. Everything in your account.

Your workplace admins. Your name, email address, role, and join date at their workplace, and the records you create for that workplace. Never your personal notes, tasks, flashcards, files, or reading history.

People you share with. Whatever you choose to share with them.

MilliRx staff. A small number of people who run and support MilliRx, when needed to operate the service, help you, or keep it secure, as section 4 describes.

Service providers. Companies that run parts of MilliRx for us, under contracts that limit what they may do with your information: Supabase (database, sign-in, and file storage), Vercel (hosting), Resend (email), and Google (if you sign in with Google, and when you search for an address in Locations, where the text you type goes to Google to suggest matches). If we turn on AI help for search, the text you type in search is sent to TypeSafe AI to choose the right answer; MilliRx does not store it.

When the law requires it. If we must respond to a valid legal request, report illegal content such as child sexual abuse material, or protect someone's safety or MilliRx's rights.

If MilliRx is ever sold or merged, your information would move with it under this policy, and we would tell you.

8. How long we keep it

9. Your choices

See and change your name and email address in Settings.

Delete your account, and with it your data, in Settings.

Stop invitation emails with the link in any invitation.

Ask us for a copy of your information, or to correct or delete it, at hello@millirx.com. Depending on where you live, you may have more rights under state law; we honor them, and we will not treat you differently for using them.