Effective date: August 20, 2026
Adhera ("we", "our", "us") respects your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our medication tracking application.
We collect information you provide directly: name, email address, medication names, dosages, schedules, dose logs, health conditions, and health goals. We also collect usage data such as app interactions and notification preferences.
Adhera processes health-related data including medication schedules, dose history, and adherence patterns. This data is classified as "special category data" under GDPR and is treated with the highest level of protection. We process this data solely to deliver the Adhera service to you.
Your data is used solely to deliver the Adhera service: tracking medications, sending reminders, generating adherence reports, and improving the app experience. We never sell your personal data.
Your data is stored securely on Supabase (PostgreSQL) servers with encryption at rest (AES-256) and in transit (TLS). Our application is hosted on Vercel with enterprise-grade infrastructure. We implement industry-standard security measures including HTTPS, encrypted database connections, strict access controls, and HTTP security headers (HSTS, Content Security Policy).
We retain your data for as long as your account is active. When you delete your account, all personal data (profile, medications, dose logs, journals, vitals, family members, community posts, gamification data) is permanently deleted within 30 days. Session tokens are deleted immediately. Anonymized, aggregated statistics may be retained after deletion but cannot be linked back to you.
Under GDPR and applicable data protection laws, you have the right to:
We use Supabase as our data processor. Supabase maintains SOC 2 Type II compliance and signs Data Processing Agreements (DPAs) with their customers. You can review Supabase's full privacy policy at supabase.com/privacy.
We use the following third-party services that may process limited data:
No other third parties have access to your personal medication data.
Your data may be processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) through our data processing agreements with our service providers.
Adhera is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately.
We may update this policy from time to time. Significant changes will be notified via email or in-app notice. The "Effective date" above reflects the last revision.
For privacy-related inquiries, data access requests, or to exercise your rights, contact us at privacy@useadhera.com.
If you are in the EU/EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.