Privacy Policy

Clinical Biostats, LLC

Clinical Biostats, LLC ("Clinical Biostats," "we," "us," or "our") operates websites, mobile applications, and related services, including the RebateRX mobile application (the "App"). This Privacy Policy explains what information we collect, how we use and store it, the third-party services that help us operate our applications, and the choices available to you.

This Privacy Policy applies to RebateRX and may also apply to additional applications and services developed and operated by Clinical Biostats, LLC in the future. If a particular application has materially different privacy practices, we may provide additional privacy disclosures within that application.

1. Information We Collect

We design our applications to collect as little personally identifying information as reasonably necessary to provide their functionality.

RebateRX does not require you to create a traditional account, and the App does not require you to provide your name, email address, or phone number in order to use its core functionality.

When you use RebateRX, you may optionally provide the following information within the App to personalize your experience:

• Insurance status: a general category you select (for example, commercial insurance, Medicare, or uninsured). This information is stored only on your device and is not transmitted to Clinical Biostats servers.
• Primary medication: the name of a medication you track within the App. This information is stored only on your device.
• ZIP code or location: used to locate nearby pharmacies. Your ZIP code or approximate location is stored only on your device and is not transmitted to Clinical Biostats servers in association with any identifying information.
• Medication schedule and refill reminders: dose schedule information you enter is stored locally on your device and is used only to trigger on-device notifications. This information is not transmitted to Clinical Biostats servers.
• Subscription status: information necessary to determine whether you have access to RebateRX Pro features and the applicable subscription entitlement.

When you use the App's drug search feature, the search query (the name of the medication you search for) is transmitted to Clinical Biostats' backend service to retrieve relevant savings program information. Search queries are not associated with your identity, insurance information, or location in the request transmitted to our servers.

2. Analytics

RebateRX is designed to use privacy-protective analytics to help Clinical Biostats understand how the App is used and improve its functionality.

Where analytics are collected, the App is designed to transmit only category-level information rather than raw health-related search queries. For example, a search for a medication associated with a particular therapeutic area may be categorized into a broad therapeutic category (such as "diabetes" or "cardiovascular") rather than transmitting the specific drug name or the user's identity to an analytics service.

Analytics data is associated with a randomly generated anonymous session identifier, not with your name, email address, insurance information, or any other directly identifying information.

RebateRX does not use analytics data for advertising targeting and does not sell analytics data to third parties.

Because RebateRX collects category-level information that may be associated with health-related therapeutic areas, users should be aware that the App's analytics practices involve the collection of health-adjacent behavioral information at the category level, even though this information is not associated with an identified individual. Clinical Biostats uses this information solely to improve the App's functionality and savings recommendations.

3. Payment and Subscriptions

RebateRX Pro subscriptions are purchased through Apple's App Store and Apple's in-app purchase system. Clinical Biostats does not receive or store your credit card number, bank account information, or other payment credentials used to complete an Apple App Store transaction.

Apple processes payments and billing information in accordance with Apple's own terms and privacy practices.

RebateRX uses RevenueCat to help manage subscription entitlements and subscription status. RevenueCat may process information necessary to associate a purchase or subscription entitlement with the anonymous session identifier used by the App. Clinical Biostats uses this information to determine whether subscription features should be available to you.

Clinical Biostats does not use subscription information for advertising or sell subscription information to third parties.

4. Firebase and Cloud Storage

RebateRX uses Google Firebase services, including Cloud Firestore and Cloud Functions, to provide certain features of the App, including the drug savings database and news feed.

The drug savings database and news articles stored in Firebase are reference content, not personal information. They are available to all users of the App and are not associated with individual users.

Search queries transmitted to the App's backend service are processed to retrieve relevant database results and are not stored in association with your identity or session.

Firebase is operated by Google. Google's handling of information through Firebase is also governed by Google's applicable terms and privacy documentation.

For more information about Firebase's privacy practices, please visit Firebase Privacy and Security .

5. On-Device Translation

RebateRX supports multiple languages. For users who select a non-English language, news articles are translated on your device using Apple's on-device Translation framework. Text submitted for translation is processed locally on your device and is not transmitted to Clinical Biostats or to Apple's servers for translation purposes under this feature.

6. Information We Do Not Intentionally Collect

RebateRX does not require or intentionally collect the following information for its core functionality:

• Your name
• Your email address
• Your telephone number
• Your precise physical location
• Your contacts
• Your photos or photo library
• Government-issued identification numbers
• Insurance member ID numbers
• Insurance carrier names
• Advertising profiles or advertising identifiers for targeted advertising

If you voluntarily contact Clinical Biostats for customer support, we may receive information that you choose to provide in that communication, such as your email address and the contents of your message. We use that information solely for purposes such as responding to your inquiry, providing support, and resolving technical issues.

7. Medical and Financial Disclaimer

RebateRX is an informational tool that provides information about prescription drug savings programs. The App is not a licensed pharmacy, does not dispense medications, does not provide medical advice, and does not issue pharmacy benefit credentials such as BIN, PCN, Group, or Member ID numbers.

Savings information provided by the App is based on publicly available program information and estimated pricing data. Actual savings, eligibility, and program availability may vary. Users should verify current program terms directly with the applicable manufacturer or pharmacy benefit administrator.

8. How We Use Information

Clinical Biostats uses the information described in this Privacy Policy for purposes including:

• Providing and maintaining application functionality.
• Retrieving drug savings program information in response to search queries.
• Delivering the news feed and savings intelligence content.
• Providing access to subscription features.
• Improving App functionality through privacy-protective analytics.
• Responding to customer support requests.
• Maintaining the security and reliability of our applications and services.
• Complying with applicable legal obligations.

We do not sell your personal information.

We do not share your information with advertisers for targeted advertising.

9. Children's Privacy

RebateRX is intended for use by adults and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

If you believe that a child under 13 has provided personal information to Clinical Biostats through the App, please contact us using the information provided in the Contact Us section below.

10. Data Retention

Clinical Biostats retains information for as long as reasonably necessary to provide the applicable service, maintain security, prevent abuse, troubleshoot technical issues, comply with legal obligations, and fulfill the purposes described in this Privacy Policy.

Information stored locally on your device is retained until you delete the App or clear the App's local data.

11. Third-Party Service Providers

Clinical Biostats uses certain third-party services to provide, secure, and operate the RebateRX application. These services include, as applicable:

• Apple: App distribution, in-app purchases, payment processing, on-device translation, and related platform services.
• Google Firebase: cloud data storage and backend services.
• RevenueCat: subscription and entitlement management.

These providers may process information in accordance with their own terms and privacy policies. Clinical Biostats uses these providers only to support the operation, security, and functionality of its applications.

12. Data Security

Clinical Biostats takes reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of information.

13. International Data Processing

Clinical Biostats and the third-party service providers used to operate our applications may process or store information in countries other than the country in which you reside.

Where required by applicable law, appropriate safeguards are used for international transfers and processing of information.

14. Your Privacy Rights

Depending on where you live, you may have certain rights regarding personal information, which may include rights to access, delete, correct, restrict, or object to certain processing of your information.

Because RebateRX is designed to minimize personally identifying information, the information we maintain may not always be directly associated with an identifiable individual. Nevertheless, if you believe you have privacy rights that apply to your information, you may contact us using the information below and we will evaluate your request in accordance with applicable law.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our applications, services, technology, legal requirements, or business practices.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy. If we make material changes, we may provide additional notice where required by applicable law.

16. Contact Us

If you have questions about this Privacy Policy, our applications, or the handling of your information, please contact:

17. Additional Application-Specific Disclosures

This Privacy Policy is intended to serve as the general privacy policy for Clinical Biostats applications and services. Individual applications may provide additional privacy disclosures where their functionality requires the collection or processing of information that differs materially from the practices described here.

For RebateRX, the practices described above reflect the application's functionality as of the "Last updated" date shown at the beginning of this Privacy Policy.