Privacy Policy

1. Introduction

Speedy Recovery Express ("we", "us") is a prescription delivery service that transports medication on behalf of licensed partner pharmacies. Because we handle information connected to your health and prescriptions, we treat that information as Protected Health Information (PHI) and comply with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state privacy law.

2. Information We Collect

To fulfill deliveries and meet compliance requirements, we collect:

• Identifiers: name, delivery address, and phone number.
• Prescription information: medication summary and pharmacy of origin, as provided by the partner pharmacy.
• Location data: GPS coordinates of the delivery destination and, while a delivery is in transit, the driver's location to provide live tracking and ETA.
• Proof-of-delivery data: package, building, and door photographs, GPS geo-tag, scan timestamps, signature or PIN confirmation, and patient rating.
• Controlled-substance verification: a photograph of a government-issued ID and a tamper-evident seal photo, for Schedule II deliveries only.
• Cold-chain data: refrigerated package temperature readings and timestamps.
• Accessibility notes: flags and instructions (e.g., elderly, mobility) shared with the driver to support safe delivery.

3. How We Use Your Information

We use the information above to:

• Plan and complete your delivery, including route optimization and hub handoff.
• Verify the correct package and recipient at pickup and delivery.
• Provide you with live tracking and arrival estimates.
• Maintain compliance records for controlled substances and cold-chain handling.
• Communicate with you about your delivery and respond to access or correction requests.

4. How We Share Your Information

We share PHI with the partner pharmacy that dispatched your order, as part of our role as their business associate. We may disclose information when required by law, regulation, or legal process, or to avert a serious threat to health or safety. We do not sell your information, and we do not use it for unrelated marketing.

5. Data Security

Proof photographs, signatures, ID images, and audit records are stored in private, access-controlled storage and accessed only through time-limited signed links. Access to delivery records is restricted to authorized users. We apply administrative, technical, and physical safeguards designed to protect PHI in accordance with HIPAA.

6. Data Retention

We retain delivery and proof-of-delivery records, including controlled-substance and cold-chain documentation, for the period required by applicable law and the partner pharmacy's policies. Records needed for an audit or legal hold are retained until the hold is released.

7. Your Rights

Subject to applicable law, you may have the right to:

• Request access to or a copy of your PHI held by us.
• Request correction of inaccurate information.
• Request an accounting of certain disclosures of your PHI.
• Request restrictions on certain uses or disclosures.
• Receive a paper copy of this Privacy Policy.

To exercise these rights, contact the partner pharmacy that issued your delivery, which will coordinate with us.

8. Tracking & Cookies

The patient tracking page refreshes automatically to show your delivery status and does not require an account. We do not use advertising trackers on the tracking page. Any device location used by the app is limited to the active delivery and is not retained beyond the delivery lifecycle except where required for audit records.

9. Children's Privacy

The Service is not directed to children. Deliveries to minors are arranged by the prescribing provider and a parent or guardian who authorizes receipt.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be posted in the app. The "Last updated" date above indicates when the policy was last revised.

11. Contact

For privacy questions or to make a request regarding your PHI, contact the partner pharmacy that dispatched your order. For questions about this policy, reach the Service at the contact information provided with your delivery.