Privacy Policy

Effective October 9, 2026

Who we are

CaseCard is run by RJRS Holdings LLC (“we”) on casecard.app and in the CaseCard iOS app. This policy covers both. Questions go to support@casecard.app.

Don't enter patient information

CaseCard stores surgeon preferences, not patient records. Don't enter patient names, dates of birth, medical record numbers, or anything else that could identify a patient. CaseCard isn't designed to hold protected health information (PHI). If a card ever ends up with patient details in it, edit them out.

What we collect

Account: your email address, your password (stored only as a secure hash), and an account ID.
Your content: the surgeons, procedures, implant preferences, flags, notes and hospitals you enter, and any share links you create.
Subscription: your plan, its status and renewal date, and the ID our payment provider gives you. Card details go straight to Stripe or Apple. We never see or store them.
Usage and performance: pages viewed, referring page, device and browser type, country, and page-load speed, through Vercel Analytics. It uses no cookies and isn't tied to your account.
Server logs: like any website, our hosting providers record IP addresses and request details to keep the service secure and fix problems.

Stored only on your iPhone

In the iOS app, cards you open are saved on your device so you can read them without a connection, and your surgeons' names are added to your Home Screen shortcuts and iPhone search. This stays on your device, isn't sent to us, and is erased when you log out.

How we use it

Only to run CaseCard for you: to sign you in, store and show your cards, process your subscription, answer support requests, and find and fix problems. We don't sell your data, don't show ads, and don't track you across other apps or websites.

Who handles it for us

These providers process data only to run CaseCard:

Supabase: database, sign-in and account emails
Vercel: hosting and analytics
Stripe: payments on casecard.app
Apple: payments in the iOS app
RevenueCat: manages App Store subscriptions
Our email providers: support email

Anyone you send a share link to can view that card until you revoke the link.

Keeping and deleting your data

We keep your data while your account is open. You can delete your account at any time from the Account page, which permanently erases your account and everything in it and cancels a website subscription. An App Store subscription must be cancelled in your iPhone's Settings. Copies may remain in our providers' backups for a short time before they expire.

Your rights

You can ask for a copy of your data, a correction, or deletion by emailing support@casecard.app. California residents have these rights under the CCPA; we don't sell or share personal information as that law defines it.

Children

CaseCard is for working professionals and isn't meant for anyone under 18.

Changes

If we change this policy, we'll update the date above and, for significant changes, tell you by email or in the app.