Privacy Policy

Effective: February 11, 2026 | Hungarian version

1. Introduction

The operator of the Pharmagister application ("Application", "Service") is committed to protecting the personal data of its users. This Privacy Policy describes what data we collect, how we use it, and what rights you have regarding your data.

2. Data Controller

Developer: Epres László
Application name: Pharmagister
Email: epresla@icloud.com
Website: https://pharmagister.hu

3. Data Collected

We collect and process the following personal data during the use of the Application:

  • Registration data: name, email address, password (encrypted)
  • Profile data: phone number, profile picture, bio, professional experience
  • Substitution requests: dates, location (zip code), position type
  • Communication data: messages, notifications
  • Technical data: device type, push notification token

4. Purpose of Data Processing

  • Creating and managing user accounts
  • Facilitating substitution requests and applications
  • Enabling communication between users
  • Sending push notifications (new requests, messages)
  • Service improvement and bug fixes
  • Response rate measurement: we display pharmacies' 72-hour response rates as a percentage on substitution requests to improve service quality. This data is automatically calculated based on responses to applications.

5. Legal Basis for Data Processing

  • Contract performance: data necessary for providing the service (GDPR Art. 6(1)(b))
  • Consent: push notifications, optional profile data (GDPR Art. 6(1)(a))
  • Legitimate interest: service security, abuse prevention (GDPR Art. 6(1)(f))

6. Data Sharing

We share your personal data with third parties only in the following cases:

  • Other users: when applying, the pharmacy can see the data you have shared (configurable)
  • Service providers:
    • Firebase (Google) – data storage, authentication, push notifications
    • Cloudinary – image and media file storage and processing
  • Legal obligation: in case of official requests

We do not sell or share your personal data for advertising purposes.

7. Payment Processing (Stripe and In-App Purchase)

The core features of the Application remain free of charge. In addition, the mobile app offers a native in-app purchase option, allowing users to buy additional demand-credit packages through the Apple App Store or Google Play. In the web version, payment continues to take place in an external, web-based Stripe Checkout environment.

  • In-app purchase (Apple/Google): The purchase is processed entirely by the Apple App Store or Google Play; payment and card data are handled exclusively by them and are not accessible to the Application. To technically activate the entitlement, we use RevenueCat, which receives the purchase ID, the product ID, and an anonymous user ID.
  • Data Stripe may receive: name, email address, billing/payment information, order and transaction data, IP address, and technical verification data.
  • Purpose: payment processing, fraud detection, verification, and service support.
  • Processing: Stripe processes card data according to its own policies and security standards. The App only receives the metadata required for successful payment and access to the feature.

8. Data Storage and Security

  • Data is stored on Google Firebase EU servers
  • Passwords are stored encrypted (hashed)
  • We use HTTPS encrypted connections
  • Only authorized personnel have access to the data

9. Data Retention

  • User account data: until account deletion
  • Substitution requests: 1 year after expiration
  • Messages: 2 years
  • Upon account deletion, all data is deleted within 30 days

10. Your Rights

Under GDPR, you have the following rights:

  • Right of access: request a copy of your stored data
  • Right to rectification: request correction of your data
  • Right to erasure: request deletion of your data ("right to be forgotten")
  • Right to restriction: request restriction of data processing
  • Data portability: request transfer of your data to another service provider
  • Right to object: object to data processing

To exercise your rights, write to epresla@icloud.com. To delete your account instantly, log in and go to Settings → Delete Account, or use the deletion request form if you cannot log in.

11. Push Notifications

The Application may send push notifications about new substitution requests, messages, and applications. You can disable notifications at any time in the Application settings or in your device's system settings.

12. Children's Data

The Application is intended for users aged 18 and above. We do not knowingly collect data from persons under the age of 18.

13. Changes

We reserve the right to modify this Privacy Policy. We will notify users of significant changes within the Application or by email.

14. Contact

For data protection inquiries, please contact us:

Developer: Epres László
Email: epresla@icloud.com
Website: https://pharmagister.hu