Privacy Policy

1. Who we are

Rest & Rx is a physician-founded wellness community for adult healthcare professionals and students, operated by Rest & Rx, LLC (“we,” “us”). This policy covers restandrx.com, the Rest & Rx mobile app, and related services. It describes what the product actually collects and how that information is used.

2. Information we collect

We collect the information needed to run your account, verify healthcare affiliation, personalize wellness content, and keep the community safe.

• Account: name, email, password (stored by Firebase Authentication), and optional profile photo
• Contact and professional details: phone number, professional role, specialty, and National Provider Identifier (NPI) when your role requires or you choose to provide it
• Healthcare verification: a work-credential photo (for example a badge) and an identity photo you upload for affiliation review, plus camera or photo-library access if you take or choose that photo in the app
• Profile preferences: affirmations, self-care interests, wellness goals, and optional spiritual-content setting
• Health and fitness information you choose to log: wellness check-ins, including mood, sleep quality, self-care actions, optional written reflections, and goal or habit progress
• Community content: posts, comments, group membership, suggestion-box notes, and reports you submit
• Location, when you allow it, to surface nearby events, discounts, and offerings (when the app is in use)
• Device and diagnostics: crash logs and performance data via Sentry, and product-interaction analytics via Firebase Analytics / Google Analytics
• Push notification tokens if you enable notifications

3. How we use information

We use this information to operate your account, review healthcare-affiliation applications, show discounts, events, retreats, and resources, run community features, send the notifications you opted into, moderate reports, prevent abuse, and improve the product.

Rest & Rx is a wellness and community tool. It is not a medical device, not a HIPAA covered entity, and does not provide diagnosis, treatment, or clinical care. Wellness check-ins are not a medical record.

4. Health and fitness information

Mood, sleep, self-care actions, reflections, and goal check-ins are health and fitness information you voluntarily create. We use them only to show you your own history, personalize wellness content, and operate features you choose (such as streaks or shared goals). We do not sell this information, do not use it for cross-context advertising, and do not send it to Apple Health, HealthKit, or Android Health Connect.

5. Verification photos and identifiers

Identity photos, work-credential photos, and NPI numbers are used only to review healthcare affiliation. They are not shown as a public profile gallery. We do not use facial recognition or other biometric identifiers. We may retain verification materials for a limited time after a decision for security, fraud prevention, or legal reasons.

6. Sharing

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We share data with service providers that help us run the product, under instructions from us:

• Google Firebase — authentication, cloud storage for photos you upload, cloud messaging / push notifications, and analytics
• Sentry — crash and diagnostic reporting
• Hosting, email, and similar infrastructure vendors needed to operate the website and API

7. Analytics, cookies, and tracking

The website may use cookies or similar technologies to keep you signed in and understand basic usage. You can control cookies in your browser.

On iOS, we may ask for permission under Apple’s App Tracking Transparency framework so we can measure product usage with Firebase Analytics. If you decline, the app still works and we do not collect that analytics. Crash reports and the features you use still operate. We do not use your information to show third-party ads or to track you across other companies’ apps for advertising.

8. Retention and deletion

You can delete your account in the app under Profile → Delete Account, or on the web at https://restandrx.com/delete-account. Sign in on that page with the same email and password you use in the app. Deletion removes your account record and associated personal data from our primary systems, including community posts where we can unlink them, subject to limited retention needed for security, abuse prevention, or law.

If you cannot sign in, email support@restandrx.com from the address on the account and ask us to delete it.

9. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information, or to object to certain processing. Contact support@restandrx.com. We process information in the United States.

California residents may email that address for CCPA/CPRA requests, including the right to know, delete, correct, and not be discriminated against for exercising those rights. We do not sell or share personal information for cross-context advertising. If that ever changes, we will update this policy and provide the required opt-out first.

10. Children

Rest & Rx is for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

11. Changes and contact

We may update this policy and will revise the “Last updated” date. Material changes will be posted on this page. Questions: support@restandrx.com.