ScriptPal NZ

Legal Documentation

Effective 05/10/2026 · Dr Hannah Brotheridge (MBChB), Christchurch, NZ

1. Who we are

ScriptPal NZ ("ScriptPal", "we", "us") is a patient-facing medication management app developed by Dr Hannah Brotheridge in Christchurch, New Zealand. This policy explains what personal and health information we collect, how we use it, who we share it with, how we protect it, and your rights. We handle your information in accordance with the New Zealand Privacy Act 2020 and the Health Information Privacy Code 2020 (HIPC).

2. Information we collect

The table below summarises the categories of information we collect, and how we get it.

Category	Examples	How we collect it
Account credentials	Email address, encrypted password (via Supabase Auth)	At sign-up, and when you sign in
Identity details	First name, last name, date of birth, NHI number	You enter these in your profile
Health information	Current medications, dosages, frequencies, start/end dates, instructions, allergies	You enter it, or it is pre-filled from a label you scan
Contact details	Emergency contact name and phone number	You enter these
Provider details	GP/doctor name, pharmacy name and phone number	You enter these
Photos	Medication photos and blister-pack photos, only if you choose to upload them	Only when you choose to add a photo
Preferences	Onboarding status, caregiver role, logbook acknowledgment timestamp, local user interface settings	Set automatically as you use the app
Family profiles	Display name, relationship, and an optional per-person privacy PIN (stored only as a bcrypt hash) for each person you manage	You add these when managing someone else
Consent & activity records	Caregiver-consent confirmation, the legal-document version you accepted and when, and an audit record of sensitive actions such as account deletion	Captured when you accept the legal documents or take a sensitive action
Technical information	Browser type, device type, and IP address	Collected automatically when you use the app

We collect this directly from you, when you enter it into the app. We do not collect health information about you from any other source without telling you.

3. How we use your information

We use your information only to:

provide the service — displaying and managing your personal medication list, family profiles, and pack view;
generate your Doctor Summary PDF;
pre-fill the add-medication form when you use the optional pharmacy-label scanner;
show plain-language educational information about your medicines;
authenticate you and keep your account secure, including rate-limiting to block abuse and brute-force attempts;
let you view, edit, and delete your own records;
send transactional email (such as sign-in links and replies to the Contact form);
meet our legal obligations.

We do not use your information for marketing or profiling, and we never sell it or share it with advertisers.

4. AI and automated processing

ScriptPal uses AI for two limited jobs. If you read an earlier version of this policy that said ScriptPal did not use AI, this section replaces it. AI is never used to make clinical decisions about you, and your data is never used to train any AI model.

Reading a pharmacy-label photo. If you use "Scan a Label or Prescription", the label photo is sent to an Amazon Web Services vision model — Anthropic's Claude Haiku, run through Amazon Bedrock — purely to read the text off the label. It is processed in Australia and is not stored by us or by AWS. See Sections 6 and 7.
Drafting educational text. The plain-language medicine explanations are drafted offline with a third-party language model (GLM-5.2) from evidence-based public clinical sources and reviewed by a registered New Zealand doctor. No information about you or your medications is involved.

5. Where our reference medication information comes from

The general medicine reference library (~2,994 NZ medications, generic and brand names) that you search against is built from the NZULM monthly CSV — a static, publicly published dataset of NZ-registered medicine names and identifiers. This is downloaded periodically, not scraped in real time. Where available, ScriptPal also links out to MyMedicines, an evidence-based New Zealand patient resource. No information about you is used to build or update this reference content — see Section 4 for how the educational text is drafted.

6. Who we share your information with

Recipient	Purpose	Location
Supabase	Secure database, authentication, and encrypted photo storage	ap-southeast-2 (Sydney, Australia)
Vercel	Hosts the application and serves it to your browser	ap-southeast-2 (Sydney, Australia)
Amazon Web Services (Bedrock), running Anthropic's Claude Haiku	AI vision model that reads a pharmacy-label photo — only when you use the label scanner	Australia — processed, not stored
Resend	Delivers transactional email (Contact-form messages and sign-in emails)	Per their own privacy policies
Upstash	Rate limiting to protect against abuse and brute-force attacks (uses your IP address)	Per their own privacy policies
NZULM	Public source dataset for reference medication names (we receive data from them; we send them nothing)	New Zealand

We do not disclose your information to any other party, and never to advertisers. The only AI vendor that ever receives anything is Amazon Web Services (running Anthropic's Claude Haiku), and only when you actively use the pharmacy-label scanner — it receives just that one label photo, to read the text on it (see Section 4). No AI vendor receives your medication list, clinical details, or any other personal data.

7. Where your information is stored

Your data is stored in Australia, within the Australasian region, as set out below.

Database and file storage (Supabase): your data is stored in ap-southeast-2 (Sydney, Australia) within the Australasian region.
Application hosting (Vercel): compute runs in ap-southeast-2 (Sydney, syd1), alongside the database in the same region.
Label scanning (Amazon Web Services): when you use the pharmacy-label scanner, the label photo is sent to Amazon Web Services and processed in ap-southeast-2 (Sydney) or ap-southeast-4 (Melbourne), Australia, then discarded. It leaves New Zealand briefly for this one job, and is not stored by us or by AWS.

Your records are stored against your account in Supabase, not only on the phone, tablet or browser you signed up on. This is deliberate: when you sign in on another device or browser, your medication list, photos and clinical details are all there waiting for you. Your browser also keeps a small local cache so the app loads quickly and works offline — that cache is only a temporary copy for performance, and it is cleared when you sign out (see Section 10).

8. Data security

All connections use HTTPS/TLS encryption.
Database access is enforced with Row-Level Security (RLS): every patient table restricts access to auth.uid()-scoped policies, so you can only see your own records.
Photos are stored in private buckets and served only via short-lived signed URLs.
Any per-profile privacy PIN you set is stored only as a bcrypt hash and is verified server-side; the PIN itself is never exposed to the app or stored in readable form.
The Supabase service-role key never reaches the browser and is used only for account deletion and the restricted admin function.
No method of storage is completely secure, and we cannot guarantee absolute security. If a privacy breach occurs that is likely to cause serious harm, we will notify you and the Privacy Commissioner, as required by the Privacy Act 2020.

9. Retention and deletion

We keep your information only while your account is active and for the purpose it was collected for.
Deleting your account (only the account's main holder can do this) triggers a permanent, cascading deletion across every table that holds your data — patient_medications, patient_details, medication_photos, and your authentication record. This is not a soft delete. Backup cycles mean full purge from backups may take longer than the immediate deletion from live systems.
Deleting a single family profile removes that person's medications, blister-pack photos and clinical details, while the rest of the account is unaffected. The main holder's own profile is always kept.
You may request access to, correction of, or deletion of your information at any time by contacting us through the Contact form in the app. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner (www.privacy.org.nz, 0800 803 909).

10. Cookies and local storage

We do not use advertising cookies, trackers, or third-party analytics. Here is what your browser stores:

A session cookie keeps you signed in. It is how the app recognises you, and it is what lets you sign in on any device or browser and pick up where you left off.
Local storage holds only non-sensitive preferences — your chosen text size and whether you have dismissed a notice — plus a short-lived onboarding draft that is copied into your account and deleted the first time you sign in.
An offline cache (a service worker) keeps a temporary copy of the app's pages and your photos so it works without a connection. This is only a performance copy; it is cleared when you sign out, so a shared device never shows the previous person's data.

11. Children and family profiles

You may add family members, or others you care for, as separate profiles in your account. When you add someone, you confirm that you have their consent — or the legal authority — to manage their health information, and you can protect their profile with an optional privacy PIN. A child's health information is held under exactly the same protections described in this policy. ScriptPal accounts are held by adults; anyone under 18 is managed through a parent or guardian's account.

12. Working toward Māori Data Sovereignty (Te Mana Raraunga)

We're treating the six Te Mana Raraunga principles as a build target, and want to be honest about where we currently stand against each one rather than claiming we've already arrived.

Principle	What we're working toward	Where we are right now
Rangatiratanga (authority & control)	Primary storage kept within Australasian jurisdiction, and no AI vendor training on any data.	Primary storage is in ap-southeast-2 (Sydney, Australia). Label scanning is a deliberate, user-initiated exception: the photo alone is processed by AWS in Australia and not stored, and no data ever trains any model (see Sections 4 and 7).
Whakapapa (relationships & context)	Demographic data collected only where clinically relevant; audit logging so you can trace access to your history.	Demographic fields are not collected in the app at all. Audit logging is implemented for admin edits and account deletion; a full read-audit of every data access is not yet in place.
Whanaungatanga (obligations & accountability)	Genuine, cascading, permanent deletion on request.	Already implemented — see Section 9.
Kotahitanga (collective benefit)	Reference content and future clinical logic reviewed to reduce, not reinforce, health disparities.	Reference content is currently limited to NZULM medicine names only (Section 5). We would like to implement Te Reo Māori educational resources.
Manaakitanga (reciprocity & respect)	Plain language; clear disclosure of where data travels, how long it's kept, how to export or delete it.	This policy is written toward that standard.
Kaitiakitanga (guardianship & ethics)	Deterministic safety checks ahead of any automated processing; ongoing engagement with Māori health advisors.	Advisor engagement has not yet begun formally.

We welcome feedback on how we can improve our approach to Māori Data Sovereignty. Please contact us through the Contact form in the app.

13. Your rights

know what health information we hold about you and access it;
ask us to correct information that is wrong;
ask us to explain why we collect information and how it's used;
request deletion of your account and associated data;
make a complaint to the Office of the Privacy Commissioner if you believe we've breached your privacy — www.privacy.org.nz, 0800 803 909.

14. Changes to this policy

We will update this policy as ScriptPal moves out of beta. Material changes to this document will be flagged in-app.

15. Contact and our Privacy Officer

Our Privacy Officer is Dr Hannah Brotheridge, developer of ScriptPal NZ (Christchurch, New Zealand). She is responsible for privacy enquiries, access and correction requests, and any concerns about how we handle your information.

Office of the Privacy Commissioner: www.privacy.org.nz · 0800 803 909