Effective 1 July 2026
This privacy policy explains how RepCase ("RepCase", "we", "us" or "our") collects, uses, stores and protects your information when you use our mobile application (the "App"). RepCase is a tool for medical device sales representatives to track product usage, bill sheets, inventory, pricing and commissions.
Account information. When you create an account we collect your name, email address, password (stored in hashed form) and company name. You may optionally add a profile photo. If you set an in-app PIN, only a cryptographic hash of it is stored, never the PIN itself.
Information you enter in the App. This includes product usage entries (case references, dates, facilities, surgeon references, products, quantities and costs), vendor price sheets and catalogs, inventory records, scheduled cases, sales visit records, commission information, and vendor contact details such as vendor names and email addresses that you choose to add.
Bill sheet images. When you scan or import a bill sheet, the App analyses the image on your device and applies black-box redaction over detected patient-identifying information, such as patient stickers, before the image ever leaves your device. Only the redacted image is uploaded and stored. Original, un-redacted images are not transmitted to us.
Your account information, entries and redacted bill sheet images are stored in a cloud database and file storage hosted by Supabase, our backend infrastructure provider. Data is encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting provider. Access is restricted by per-user and per-company access rules, so your data is available only to you and, where applicable, authorised members of your company.
We use a small number of service providers to operate the App, and share with them only what is needed to provide the feature you are using.
Supabase — hosts our database, authentication and file storage (see section 3).
Anthropic — when you scan a bill sheet, packing list or price sheet, the redacted image or document text is sent to Anthropic's AI service to extract line items so you do not have to type them in. Only the redacted version is processed.
Resend — when you choose to email a bill sheet to a vendor, the email, including the case's line items and redacted bill sheet images, is delivered through Resend, our email delivery provider.
Apple — if you purchase a subscription, the transaction is processed by Apple through the App Store. We do not receive your payment card details.
We do not sell your data, share it with advertisers, or use third-party advertising or analytics trackers in the App.
We use your information solely to provide the App's features: syncing your data across devices, extracting line items from documents, sending vendor emails you initiate, managing your account and company access, and providing support. We also record limited usage metering, such as the number of AI scans, to enforce plan limits and prevent abuse.
The vendor email feature only sends email when you tap Send. Each email includes the case's product line items and any redacted bill sheet images on file, and is addressed to the vendor contacts you have configured. You are responsible for the accuracy of the vendor email addresses you add.
RepCase is designed to avoid collecting patient-identifying information. Bill sheet images are redacted on your device before upload, and the App does not ask for patient names, dates of birth or other patient identifiers.
Please do not enter patient-identifying information into free-text fields such as case labels or notes. The App is a sales-tracking tool and is not intended to be a system of record for protected health information.
Your data is retained while your account is active so it can sync across your devices. You may delete entries, images and vendor contacts in the App at any time. To delete your account and its associated data, contact us at the address in section 11 and we will process the request.
We use encryption in transit, database access rules that isolate each user's and each company's data, hashed credentials, and an optional in-app PIN lock with inactivity timeout. No method of transmission or storage is completely secure, so we also recommend using device-level security such as Face ID, Touch ID or a strong passcode alongside the App's lock screen.
The App is intended for professional use and is not directed at children under 13. We do not knowingly collect information from children.
If you have any questions about this privacy policy, or want to request account deletion, contact us at support@repcase.io.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date above.