Privacy Policy — CivioraMed
Effective date: 31 October 2026 · Version: 2.3
Changes in 2.3 (31 October 2026): sections 2 and 3 now say that, on Android, Google Play's billing library inside the app sends Google technical diagnostic records about purchase requests, under Google's own terms. This was already the case before this version. We do not receive these records and nothing about the data we receive changed, so the disclaimer version is unchanged. The note at the end now gives the current disclaimer version, v2.6.
Changes in 2.2 (14 October 2026): section 9 now says what we do if a security incident affects data we hold: we post a notice on this page and show it in the app, because we hold no email address or other way to reach you individually. Nothing about your data changed, so the disclaimer version is unchanged.
Changes in 2.1 (13 October 2026): section 4 now says that, besides quoted text, the app shows short notes we write and a few computed lists, and that LactMed is published by NICHD. The disclaimer is now version v2.5. Nothing about your data changed.
Changes in 2.0 (9 October 2026): the minimum age is 18 (Terms of Use, section 3). On iPhone the app may ask your device to confirm your age range before it opens; section 6 says how, and section 2 lists the module that asks. The answer is not stored and not sent to us. Nothing else changed.
Changes in 1.9 (7 October 2026): searching by condition, drug or test name, and reading every page, is free and never counts toward anything. The 20 free uses and the subscription now apply only to searching by sign — finding the conditions whose sources list a sign you type. The counter on your device (section 1) now counts only those uses, and only when you tap Show these conditions. Nothing new is collected, so the disclaimer version is unchanged.
Changes in 1.8 (6 October 2026): section 5 now describes an in-app Delete my account now button that deletes everything linked to your identifier immediately, with no email needed; the email method remains as a fallback. Section 3 now states that Supabase, the only third party that processes personal data on our behalf, is contractually required to provide the same or equal level of protection described in this policy. Neither change affects what data we collect or how long we keep it, so the disclaimer version is unchanged.
Changes in 1.7 (28 September 2026): the app no longer signs in when it opens. An anonymous identifier is now created only when you accept the disclaimer, and searches and other content requests are sent without it. Section 1 now lists the sign-in session record that our sign-in service keeps on our database — including the IP address and device/browser string it sees — and states that we erase those within one hour. An identifier for which no acceptance was recorded is deleted once it has been inactive for a day. A deletion request now removes everything linked to the identifier, and we delete your email afterwards (section 5). Section 8 now describes how to exercise your rights, appeal, and the rights of Nevada residents; Washington residents have a separate Consumer Health Data Privacy Policy. Section 2 now lists the app's direct dependencies (the splash-screen library was missing). Because this is a material change, the disclaimer version moved to v2.3 and the app asks you to accept again.
Changes in 1.6 (27 September 2026): the app now sells an auto-renewing subscription through the App Store / Google Play (after 20 free searches). Section 1 lists what is kept on your device, including the free-search counter and the subscription status. Payment details never reach us.
Changes in 1.5 (25 September 2026): when a search finds nothing, the app offers links that search MedlinePlus or PubMed for the same term, and results can show a definition from Medical Subject Headings (MeSH).
Earlier changes: 1.4 (16 September) added the About & Legal screen that shows your identifier; 1.3 (11 September) renamed the app from Medical Reference to CivioraMed; 1.2 (10 September) removed a statement about clinical guidelines that the app did not surface; 1.1 (9 September) stated our independence from the agencies whose data we reproduce and that Android backup is off.
CivioraMed is published by NewEvolve. This policy describes what the app collects, what it does not, and why.
This policy was written from an audit of the app's source code and database, not from a template. Every claim below corresponds to specific code or a measurement.
1. What the app collects
| What | Where it goes | Why |
|---|---|---|
| An anonymous identifier (a random UUID) | Our database (Supabase) and your device | Created by our sign-in service when you accept the disclaimer — not when you open the app. It records that this device accepted the disclaimer. The app keeps a copy on your device; at launch it sends the identifier to our database to check that an acceptance is on record, without signing in |
| A consent record — the identifier, which disclaimer version was accepted, the date and time, the app version, and that you ticked all the statements on the disclaimer screen, recorded as two flags: that you are a healthcare professional or student, and that you accept the disclaimer | Our database | A record that the disclaimer was shown and accepted, by someone who stated they are a professional |
| A sign-in session record — when the identifier signs in: the time, and the IP address and device/browser string seen by the sign-in service | Our database | The sign-in service writes this itself. We erase the IP address and device/browser string within one hour (an automated job runs every 15 minutes); earlier copies can remain in our database provider's automated backups until they expire (section 5). The session and its times remain while the identifier exists, so the app can record a new acceptance if the disclaimer changes |
| The disclaimer version number | Your device only | So the app does not show the disclaimer again on every launch |
| The free sign-search counter (a single number, 0–20) | Your device only | To know when the 20 free sign searches are used up. It goes up only when you tap Show these conditions; it does not record what you searched |
| The subscription status (subscribed: yes/no) | Your device only | So searching by sign stays unlimited without asking the store on every keystroke. The store is the source of truth; the app re-checks it at launch |
| The sign-in token for the anonymous identifier | Your device, with the matching refresh token held by our sign-in service | Used only when the app records an acceptance. The app does not use it for searches |
If you open the app but do not accept the disclaimer, nothing is written to our database. If an identifier is created but no acceptance is recorded (for example, the connection dropped at that moment), we delete it once it has been inactive for a day (an automated job checks every 15 minutes).
The anonymous identifier is not linked to your name, email, phone number, device identifier, or advertising identifier. It is not sold; it is stored by our database provider, Supabase (section 3).
2. What the app does NOT collect
- No name, email address, phone number, or any account details. The app has no sign-up form and no login screen.
- No health information about you. The app is a reference library. It has no patient record, no symptom diary, no history, and no profile.
- No searches are kept. What you look up — the terms you type and the condition, drug or test pages you open — is sent to our database without your anonymous identifier. Like any request on the internet, it arrives with your device's IP address. The database does not store the term, and the database's own logs do not record it. Our database provider keeps standard request logs for its own operations (section 3). If a search finds nothing, the app shows two links that search the same term on MedlinePlus or PubMed, websites of the U.S. National Library of Medicine. The term is sent to them only if you tap a link: the page then opens in your browser with the term in its address. Nothing is sent to them until you tap.
- No location, contacts, photos, camera, microphone, or calendar. The app requests none of these permissions.
- No advertising, analytics, tracking, or crash-reporting SDKs. The app's direct dependencies are: Expo, React Native, expo-router, expo-constants, expo-linking, expo-splash-screen, expo-status-bar, react-native-safe-area-context, react-native-screens, react-native-url-polyfill, AsyncStorage, expo-iap (the in-app purchase bridge to the App Store / Google Play), expo-age-range (asks your device to confirm your age range; see section 6), and the Supabase client, plus the supporting modules these bring in. (React DOM and React Native Web are used only for our web preview and are not part of the phone app.) None of them is an advertising, analytics or crash-reporting product. On Android, expo-iap uses Google Play's billing library, which sends Google technical diagnostic records about purchase requests, under Google's own terms. We do not receive these records. The library handles purchases only, not your searches.
- We do not sell your data, and we give it to no one other than the services listed in section 3. When you tap a MedlinePlus or PubMed link, your own browser sends the term to that website, as described above.
3. Third parties
| Service | Role | What it sees |
|---|---|---|
| Supabase (Supabase Inc., US, under its published Data Processing Addendum) | Database, sign-in service and hosting | The anonymous identifier, the consent record and the sign-in session record (section 1); your searches as they pass through, without your identifier; standard request logs (such as IP address and time) kept by Supabase for its own operations under its own retention |
| Google (Gmail) | Our support mailbox | Only if you email us: your email address and what you write, including the identifier if you send it. We delete a deletion-request email once the deletion is done |
| Expo / EAS (650 Industries, US) | App build and delivery | Nothing about your use of the app |
| Apple App Store / Google Play | Distribution and payment | Whatever the store itself collects under its own policy. Subscriptions are bought through the store's own in-app purchase system: the store handles your payment method, billing and receipts. We never see your card or your store account. The app only learns whether an active subscription exists. On Android, the store's billing library inside the app also sends Google technical diagnostic records about purchase requests; we do not receive them (section 2) |
| Source websites (FDA / openFDA, MedlinePlus, NCBI Bookshelf, RxNav, PubMed, MeSH) | Opened in your browser only when you tap a source or search link | If you tapped a search link, the term you searched; like any website, what your browser sends (such as IP address). Each site's own privacy policy applies there |
No third-party artificial-intelligence service receives your data. Content shown in the app is prepared in advance from public sources; the app does not send your query to any AI service (Apple guideline 5.1.2).
Supabase, the only third party that processes personal data on our behalf, is contractually required — under its published Data Processing Addendum — to "implement and maintain appropriate technical and organizational data protection and security measures" meeting the standards set out in its published Schedule 1, and may not sell this data or use it for its own purposes. We confirm that this provides the same or equal level of protection as described in this policy. The other services in the table above are not our data processors: Google (Gmail) is a general mailbox we read ourselves; Expo/EAS only builds and delivers the app; Apple and Google process store purchases under their own policies; source websites receive nothing from us and act only on your own direct request.
4. Where the content comes from
All quoted text in the app comes from U.S. government sources: drug labeling from the FDA's openFDA database; MedlinePlus, Medical Subject Headings (MeSH) and RxNorm drug names from the National Library of Medicine; and the Drugs and Lactation Database (LactMed), published by NICHD and hosted by the National Library of Medicine. Each is used under the agency's published terms. The app also shows short notes we write (for example, that a section is not in our data), without quotation marks, and on a few condition pages a list we compute from these sources, labelled as computed. The text of clinical practice guidelines protected by copyright is never reproduced.
Each condition and drug page shows the source organization, the document, the date we accessed it, and — where the source publishes one — a version or last-updated date. When a search matches none of our records, the app may quote sentences from our own condition pages that contain the term, exactly as those pages show them, and may show the MeSH definition of the term, labeled with NLM and the MeSH edition. Definitions in which NLM cites another reference work are not reproduced; the app links to NLM's page instead.
This product uses publicly available data courtesy of the U.S. National Library of Medicine (NLM), National Institutes of Health, Department of Health and Human Services; NLM is not responsible for the product and does not endorse or recommend this or any other product. Breastfeeding information: Drugs and Lactation Database (LactMed®), National Institute of Child Health and Human Development; courtesy of the U.S. National Library of Medicine. LactMed is a registered trademark of the U.S. Department of Health and Human Services.
NewEvolve is an independent developer. This application is not affiliated with, sponsored by, or endorsed by the FDA, the National Institutes of Health, the National Library of Medicine, or any other agency whose public data it reproduces. Source names are used only to identify where each piece of text came from.
5. Deleting your data
The app has no account, so there is nothing to sign out of.
In the app: open About & Legal from the button in the top right of the main screen. It shows your anonymous identifier and a Delete my account now button, which deletes everything in our database linked to that identifier — the consent record, the sign-in session record and its tokens — right away, with no email needed. If the app cannot verify your sign-in session on that device, it tells you and offers a Request deletion by email button instead, which opens your mail app with the identifier already filled in; once we receive it we delete the same things and every email you sent us, confirm by email, and then delete the email thread. Either way we keep only the dates of the request and a random ticket number, not the identifier.
By email: write to the address in section 11 with the subject line "Delete my record" and include the identifier shown on that screen. The identifier is how we confirm the request is yours: it is the only thing that links you to the record, and we deliberately hold nothing else that would let us find it. We act on requests within the times given in section 8.
Deleting the app from your device removes everything it stored locally (the anonymous identifier, the disclaimer version, the free sign-search counter, the subscription status and the sign-in token) immediately. An active subscription is not lost: it lives in your store account and comes back with Restore purchases.
Backups. On Android, automatic backup is
switched off for this app
(allowBackup=false), so nothing the app stores is copied to
your Google Drive and nothing is restored when you reinstall. On iOS,
what the app keeps on your device (the items in section 1 that are kept
on your device) may be included in your own iCloud or local device
backup like any other app's data; none of it contains information about
you, and we never receive your backup. Our own database backups do not
include identifiers or consent records. Our database provider also keeps
automated backups on its own schedule; data deleted from our database
disappears from them as they expire.
6. Children
This app is intended for licensed healthcare professionals and health professions students. It is not directed to children, and we do not knowingly collect information from anyone under 13.
You must be at least 18 to use the app (Terms of Use, section 3). On iPhone, the app may ask your device to confirm your age range through Apple's Declared Age Range feature before it opens. The answer is used only on your device to decide whether the app opens; it is not stored and is not sent to us or to anyone else.
7. Health information and HIPAA
We are not a covered entity or business associate under HIPAA, and the app does not create, receive, maintain, or transmit protected health information. The app holds no information about any patient.
8. Your rights
You can ask us to confirm whether we hold data linked to your identifier and send you a copy of it, to delete it (section 5), or to withdraw your consent. Accepting the disclaimer is required to use the app, so withdrawing consent means we delete the record and the app asks you to accept again the next time you open it.
How: email the address in section 11 with your identifier. No account is needed and there is no fee. We respond within 45 days of receiving your request; if we need more time, we may extend this once by up to 45 days and will tell you why within the first 45 days.
Appeal: if we decline a request, reply to our answer with the subject "Appeal". We answer in writing within 45 days. If we deny the appeal, our answer tells you how to contact your state's Attorney General.
Washington residents: see our separate Consumer Health Data Privacy Policy.
Nevada residents (NRS 603A): you can ask us to confirm whether we collect, share or sell your consumer health data, for a list of the companies that received it (section 3; we sell it to no one), to stop collecting it, and to delete it; we delete within 30 days of confirming your request. Consumer health data we may receive: what you look up — the terms you type and the pages you open — sent without your identifier and not stored in our database, used only to show results; and what you write if you email us, used only to answer you. Sources: directly from you. Sold: never. Who receives it in running the service: Supabase (database, sign-in, hosting) and Google (Gmail, only if you email us); section 3. Reviewing or changing it: email us (above); we hold no health profile to change. Material changes: as described in section 10. No third party collects consumer health data over time and across different websites or online services when you use this app or our website: the app has no analytics, advertising or tracking tools of its own (section 2 describes the diagnostic records that Google Play's billing library sends to Google on Android), and our website loads no analytics or tracking scripts. Effective date: at the top of this policy.
Depending on where you live, you may also have rights under laws such as the California Consumer Privacy Act or the EU General Data Protection Regulation. The same email and identifier are how to exercise them.
We do not sell personal information and have never done so.
9. Security
Access to the database is protected by row-level security: a consent record can be read only by the identifier that created it, and it cannot be modified or deleted by the app — the permissions to do so were never granted. Only a deletion you request removes it (section 5). Reference content is read-only for the app, and content requests carry no identifier.
If there is a security incident. We hold no name, email address, phone number or payment details (sections 1 and 2), so we have no way to write to you individually. If an incident affects data we hold about you, we will post a notice on this page and show it in the app, promptly, and we will notify the authorities where the law requires it. We do not collect contact details just for this purpose: holding them would add data that could itself be exposed.
10. Changes
If this policy changes materially, the app's disclaimer version is incremented and the app asks you to accept the disclaimer again before continuing; the updated policy is linked from About & Legal. Version 1.7 was such a change: the disclaimer version moved to v2.3.
11. Contact
NewEvolve — growevolve.business@gmail.com
This policy describes version 1.0.0 of the app and disclaimer version v2.6.