Go back

Privacy Policy

This policy describes what the Ai pharma mobile app and website do with information. Ai pharma is operated by NIBRAS LEADERSHIP FOR SOFTWARE SOLUTIONS LLC, which is responsible for the information described here. The policy makes no promises about storage, transmission or security that the app and website do not keep.

Who we are and how to contact us

The Ai pharma mobile app and website are provided by NIBRAS LEADERSHIP FOR SOFTWARE SOLUTIONS LLC (“Ai pharma”).

For any question about this policy or about your information, or to ask for your account and its information to be deleted, email [email protected], or use Contact Customer Service in the mobile app or on the website (aipharmajo.com/support/contact). Neither needs you to sign in, so they also work for an account that is pending activation, rejected or suspended, or that you can no longer sign in to. How deletion requests are handled is set out in the Account Deletion document (aipharmajo.com/legal/account-deletion).

What is stored, and where

Information you submit through features connected to the Ai pharma service is sent to Ai pharma’s servers and stored there so the service can work. This includes your account and organization details, shortage lists, files you upload for reading, orders, supplier offers, support requests and a record of your signed-in sessions.

On your device, the app keeps your chosen language so it survives a restart, and what it needs to keep you signed in: a sign-in token in the phone’s secure storage on the mobile app, or a sign-in cookie on the website. After a shortage-list file you picked has been uploaded, the app also keeps a note of it on the device — the identifiers of the list, the file and the reading job, and the file’s name, type, size and a reference to the picked file — until you adopt the plan made from it or discard it (on the mobile app, also when you choose to type or paste the list instead). On the mobile app the note stays through restarts and sign-out until then; on the website it lasts only as long as that browser tab. A reference image a supplier picks for a product in the product editor is kept only in the app’s memory and is not uploaded; a photo used to add a product is uploaded to be read, as described below, and may also be shown as that product’s reference image.

Ai pharma’s servers also keep some records you do not type in: which organization was shown a sponsored card or tapped it (each recorded at most once per card, per organization, per hour), a security record of account events such as sign-in lockouts, password changes and account closure, and counters used to limit repeated sign-in attempts.

No account passwords, card numbers or payment credentials are stored by this app. The app never asks for card details: an order is paid by cash or card, chosen at checkout from the methods the app shows as available, and no payment method is saved to your account.

Files and photos you choose

The app reads a file or photo only after you choose it or take it — for example a shortage list, or a photo of a product’s box when a supplier adds a product. It reads the whole file, and may make a photo smaller before sending it.

When you use a feature that reads the file, the file is uploaded, together with its name, type and size, to the file storage Ai pharma uses for the service, and Ai pharma’s server then processes it.

When document reading is enabled for the service, the server sends the file’s contents to Microsoft’s Azure AI Document Intelligence service, which reads the text. Whether it is used depends on how the service is configured; when it is not enabled, the file is not sent to it.

Camera and photo library access is requested only at the moment you use those features, and refusing it stops only that feature.

Location

The app does not read your device location.

Devices

Each device you sign in on has its own session on Ai pharma’s servers, recorded with the platform (web, Android or iOS) and the browser or app details the device sends. Signing out ends the session on that device. Changing your password, or a pharmacy’s sign-in phone number, signs out your other devices, and closing your account signs out all of them.

Ai pharma does not tie your account to one device. The Security & Devices screen lists the sessions currently signed in to your account, as Ai pharma’s servers record them: for each, its platform, the device name it reported (if any), when it signed in and when it was last active, with the session you are using marked. From there you can sign out any of your other sessions; this ends that session on Ai pharma’s servers, and that device has to sign in again. To end the session you are using, sign out as usual.

Closing your account

You can close your account yourself while it is active, without contacting anyone: on the Ai pharma website, from Delete Account in the account menu, or in the Ai pharma mobile app, a pharmacy from Account and a warehouse or supplier from More. What closing it erases and what Ai pharma has to keep are set out in the Account Deletion document.

If you cannot sign in — for example because your account is still pending activation, has been rejected or suspended, or you have lost access to it — you can ask Ai pharma to delete it instead, by email to [email protected] or through Contact Customer Service, as described in the Account Deletion document.

Retention and hosting

Ai pharma’s servers run on infrastructure hosted by Hetzner. Cloudflare provides the network and proxy services in front of the Ai pharma website, the app’s connections and the servers, and Cloudflare R2 object storage holds uploaded files and Ai pharma’s encrypted database backups. When document reading is enabled, supported uploaded documents are read by Microsoft’s Azure AI Document Intelligence service, as described above.

Encrypted backup copies of the database are kept for disaster recovery: daily backups for up to 35 days and monthly backups for up to approximately 400 days, after which they expire under the normal backup-retention schedule.

Beyond that, this policy does not state how long the information described above is kept. Nothing here should be read as a commitment on that point.