Privacy Policy

ScriptTracker · Jahan Interactive Pty Ltd · Last updated 7 September 2026 · What changed

The short version: No ScriptTracker account. No advertising or third-party analytics. Your records stay on your devices unless you enable private iCloud sync, import a script from the official eRx page, or choose to share, export, print or add something to your calendar yourself. We treat your medication records as health information, and we have designed the app so that we never receive them.

1. Who we are, and how we treat your information

ScriptTracker is an iPhone app made by Jahan Interactive Pty Ltd (ABN 54 093 597 150), an Australian company based in Western Australia. Contact: info at jahan-interactive.com.au.

Medication records are health information, which the Privacy Act 1988 treats as sensitive information. Whether or not the Act's small-business rules apply to us in a given year, we hold ourselves to the Australian Privacy Principles in how ScriptTracker is built and how we respond to you. The most important consequence is structural: the app keeps your records on your own devices, and there is no ScriptTracker server that receives them.

2. What information the app handles

To do its job, ScriptTracker stores information you enter or capture, including: medication names, strengths, forms and quantities; whether a medicine needs a prescription; prescription and expiry dates and repeats remaining; script and token identifiers and their scannable codes; your dose settings and pill counts, with a history of counts and adjustments; prescriber and pharmacy names and contact details; visit notes and pharmacy owings; reminder settings; your dosette box settings and fill records (which medicine went in which compartment, the counts, and the compartments you mark as done); and any photos you keep of a scanned paper script, of a medicine's pack, or of a filled box compartment for reference. If you track for more than one person, each gets a separate profile (§11).

3. Where it is stored and who can see it

On your devices. Everything in §2 lives in the app's protected storage on your iPhone (an app-group container shared only with the app's own Share Extension), unless you turn on private iCloud sync (§6) or send something somewhere yourself (§10).
No account or sign-up. We don't know who you are, and there is nothing to log in to.
No analytics or tracking. The app contains no advertising, analytics, crash-reporting or tracking code of any kind, and it does not log medication details anywhere. (If you have chosen in iOS Settings to share diagnostics with app developers, Apple may send us anonymous crash reports under Apple's own policy; they contain no medication data.)
No developer-operated medication server. We don't run a server that receives, stores or can see your medication data. The only network request the app makes about a script is the one described in §4, and it goes to eRx, not to us.

4. The official eRx token page

When you import an eScript link, or open Show at pharmacy for an eScript, the app loads the official eRx token page for that link, once, and reads the prescription details or current status it shows. This is the same page you would see by tapping the link in your SMS, loaded in the same way a browser would load it. That means eRx (and any services its page relies on) sees your device's IP address and the token in the link. The app loads the page in a private, non-persistent web view: no cookies or other website data are kept once the page has been read. We receive nothing from this request.

It happens only when you initiate it: there is no launch-time, background or repeating check. Manual entry and paper scanning work fully without it.

5. Adding scripts: share sheet, clipboard, camera

Share sheet. Sharing an eScript link from Messages runs ScriptTracker's Share Extension, which reads that link, offers you the details to review, and saves into the same on-device store as the app. It stores nothing else and makes no request other than §4.
Clipboard. The Add screen checks whether your clipboard currently holds a link so that it can offer a Paste button. It reads the clipboard's contents only when you tap Paste; iOS shows its own paste notice at that moment. Nothing from your clipboard is stored unless you then save the script.
Camera and photos. The camera is used, with your permission, to scan a paper repeat, to photograph a medicine's pack, and to keep a reference photo of a filled box compartment. Scanning reads the medication details on the paper on your device; it deliberately does not extract personal details such as your name, address or Medicare number into app fields. Photos you choose to keep stay in the app's on-device storage and are never uploaded by us. Choosing an existing photo uses Apple's picker, which gives the app only the photo you pick.

6. Optional private iCloud sync

You can turn on sync in Settings. This stores your data in your own private iCloud account via Apple's CloudKit, under your Apple ID. It is accessible only to you, not to us. Turn it off at any time and the app keeps working fully on-device; Remove iCloud copy deletes what was synced (§12).

7. Subscriptions and the trial period

ScriptTracker is free to try for 30 days with nothing locked. After that it is a subscription ($14.99 AUD a year or $1.99 AUD a month) handled by Apple's StoreKit and managed in your Apple subscriptions like any other. Apple processes the payment. ScriptTracker never sees your card details, only the entitlement state StoreKit returns (subscribed or not). Nothing is charged automatically at the end of the trial: you choose a plan in the app or you don't, and either way your records stay readable and exportable. A small amount of trial-timing state is kept in a separate, limited iCloud key-value store so your trial start date survives a reinstall or a new device; it holds no medication data.

8. Notifications

Reminders (reorder, script expiry, repeats, owing, fill day) are local notifications scheduled on your device. No notification service of ours is involved. Lock-screen notification text is generic (for example, "Open ScriptTracker to review an item that needs attention") rather than naming a medicine, dose or profile, to reduce what is visible on a locked screen.

9. Face ID

App lock uses Face ID or your passcode via Apple's on-device APIs. Biometric data never leaves your iPhone and is never available to us.

10. Things you send elsewhere yourself

Some features hand your information to another app or service, and each one happens only when you tap to do it. Nothing is ever sent automatically.

Exports and printing. The GP summary and other exports produce text or a PDF that you share or print through iOS. Where it goes is under your control.
Messaging a pharmacy. Pre-fills an SMS in your own Messages app. You review and send it, or don't.
Adding a pharmacy run to your calendar. With your write-only calendar permission, the app creates a calendar event for the run. The event's notes name the medicines to collect. Your calendar may sync to iCloud, Google, Microsoft or another calendar service you use, in which case those medicine names go wherever your calendar goes. If you would rather they didn't, don't use this option; the reminder inside the app does the same job.
Support. If you contact us, we hold that correspondence only to help you, and only because you sent it. Please don't include medication details you don't need to.

11. Tracking medicines for someone else

Profiles let you keep a partner's, parent's or child's medicines separate from your own on the same iPhone. When you do this you are recording another person's health information, so please make sure you have their agreement (or are entitled to act for them). Everything above applies to their profile exactly as it does to yours; nothing about them is shared with us.

12. Access, correction and deletion

Because your records are on your device, you already have full access to them: every field can be viewed and edited in the app, and the GP summary exports a complete copy at any time, subscribed or not. To delete: remove individual items in the app, use Settings → Data & privacy → Delete all data, or delete the app itself to remove everything stored locally on that device. Deleting the app does not remove data already synced to iCloud if sync was on; for that, use Settings → Data & privacy → Remove iCloud copy, or iOS Settings → Apple ID → iCloud. We don't set any retention period beyond what you choose: your data stays until you remove it. We hold no copy, so there is nothing for us to delete on your behalf, and nothing we could hand over if asked.

13. This website

scripttracker.au is a static site with no analytics, advertising or tracking scripts, and it sets no cookies. It is the only part of ScriptTracker that lives on the internet; the app itself has no website component and never talks to this site on its own (tapping the Privacy Policy link in Settings simply opens this page in your browser). The site is hosted on Cloudflare (Cloudflare, Inc., United States, serving from data centres worldwide including Australia). Like any host, Cloudflare processes ordinary request data (IP address, browser type, page requested, time) to deliver and protect the site, under Cloudflare's privacy policy. We don't receive, keep or analyse individual access logs, and we have not enabled Cloudflare's visitor analytics. Because Cloudflare is based overseas, that request data may be processed outside Australia; it is never combined with anything from the app, and nothing from the app ever reaches this site.

14. Children

ScriptTracker is intended for adults managing their own medications, or a family member's under §11, and is not directed at children under 18.

15. Questions and complaints

If you have a question about this policy, or believe we have handled your information in a way that breaches it, email info at jahan-interactive.com.au. We will acknowledge within 7 days and aim to respond fully within 30. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

16. Changes to this policy

If the app's data practices ever change (for example, a future version adding official Active Script List sync, or on-device Apple Intelligence processing of scanned scripts) this policy will be updated first and the change clearly explained in the app before anything new happens to your data.

7 September 2026. Pricing moved from a one-time purchase to a subscription (§7). PBS Safety Net tracking removed from the app and from §2. Added dosette box records, medication and reference photos, and medicines that need no prescription to §2. New sections on the share sheet, clipboard and camera (§5), calendar and other things you send yourself (§10), tracking for someone else (§11), this website (§13) and complaints (§15). eRx section (§4) now states what eRx can see and that no cookies are kept.
14 August 2026. eScript link import described (§4). Absolute privacy wording replaced with accurate statements throughout.
July 2026. First published.

Not medical advice. ScriptTracker is a personal organisation tool. It does not provide dosing, clinical or medication advice. Always confirm medication questions with your pharmacist or GP.