Privacy

What we receive when you search

• The medicine, strength, quantity, ZIP code and coverage type you give us, and anything optional you add: a Medicare plan ID, your copay, what you’ve paid this year. We use it to answer that search and don’t keep it afterwards.
• If you check savings programs, your household size, rough income and savings. Used for that check only, never stored.
• To save typing, the website’s search form can start with the ZIP code of your internet connection’s approximate location, which our host provides with each request. It only fills the form; we don’t store it.

What stays on your device

• Your last ZIP code and coverage type, medicines you save to “My medicines” and fills you log are kept in your own browser. We never receive them. Clearing your browser data removes them.
• Free-medicine applications are filled in your own browser from the link we give you. What you type into them never reaches our server, and you review, sign and send each one yourself.

Inside Claude and ChatGPT

When you use EveryCard Rx inside your AI app, it sends us only what we need to answer, such as the medicine and ZIP code. We don’t see your conversation. The app’s own privacy policy covers your chats.

Health records (for prescribers)

When a health system connects its records to our prescriber cost card, the record sends the medicine being ordered, the patient’s ZIP code and coverage. We use them to make that card and don’t store them. We never receive names.

What we log

To keep the service working we record coarse counts: which tool ran, the first three digits of a ZIP code, the coverage type and how many options we found. Our logs are built so that drug names, full ZIP codes, income and free text can’t be written to them, and our host’s request logs are off with web addresses redacted.

Who else is involved

• Cloudflare hosts the site and runs our servers. It processes each request to deliver it.
• Price sources. To get a live price we send Mark Cuban Cost Plus Drugs the medicine name and strength, never your ZIP code or anything about you.
• Google Fonts. Our pages load their typefaces from Google, so your browser connects to Google, which sees your IP address.
• Email. Email you send us is handled by Google (Gmail).
• Card fills. When our savings card is live, a licensed discount card administrator processes each fill. The card’s numbers identify our program, not you. We receive fill information with names and other identifying details removed, only to pay partners and produce overall reports. Reports to health networks never include names and hide any group under 11 people.

We don’t sell personal information or consumer health data, and we don’t use advertising pixels or third-party trackers.

How long we keep things

• Search details: not kept after the answer.
• Operational logs: kept by Cloudflare for up to 7 days, then deleted.
• Email you send us: kept while we need it to help you, and deleted when you ask.
• Data in your browser: until you clear it.

Consumer health data and your choices

Medication searches are consumer health data under laws such as Washington’s My Health My Data Act. We collect it only to provide the service you asked for. You can ask what we hold about you, or ask us to delete it, by emailing support@everycardrx.com with “privacy” in the subject. Because we don’t keep search details, there is usually nothing tied to you to return.

Children

The service is for adults managing their own or a family member’s medicines. We don’t knowingly collect information from children under 13.

Changes

If we change this policy, we’ll update the date at the top. If a change means collecting more, we’ll say so on this page before it takes effect.