Privacy Policy for VaultMed

Effective Date: August 22, 2026

1. Information We Collect

To provide secure, real-time inventory synchronization, VaultMed collects minimal, role-based data:

Authentication Data: We utilize Sign in with Apple to authenticate users securely without managing external passwords.
Camera Data: The app requires camera permissions strictly to scan GS1 barcodes and capture supplier invoices. These images are processed to extract inventory line items and are not shared externally.
Activity Logs: We record inventory actions (e.g., dispense, transfer, witness, void). These actions are timestamped and attributed to your designated clinic role (Manager, Nurse, or Doctor) to maintain an accurate chain of custody.

VaultMed is designed solely to replace paper inventory logs for independent practices.

Operational Syncing: Your data is used exclusively to maintain a real-time, synchronized inventory state across all connected devices within your specific clinic.
No Patient Data: This application does not collect, transmit, or store Protected Health Information (PHI) or any patient-identifying data.
Live Updates: We utilize secure websocket connections to push instant stock updates and state changes to your team.

Protecting your operational data is fundamental to our architecture.

Zero Local Footprint: No inventory logs, audit trails, or account details are stored locally on your iOS or iPadOS devices.
Secure Remote Servers: All inventory data is encrypted in transit and securely hosted on our online servers, ensuring your logs remain safe even if a clinic device is lost or damaged.
Strict Access: Only authorized users approved by your clinic manager can access your specific practice's stock records.

Governing Law: This policy and your use of VaultMed are governed by the laws of the State of Minnesota.
Updates: We may update this policy as we introduce new features. Significant changes will be communicated via the app prior to taking effect.