Privacy Policy

This Privacy Policy describes how MedVault ("we", "us") handles information you provide when you use the MedVault application. MedVault is a personal medical records tool that helps you organize your own health history.

1. Information we collect

• Account information: email address, name, and password (hashed) — or the identifier returned by Google when you sign in with Google.
• Profile information you enter: date of birth, blood group, gender, emergency contact.
• Medical records you create: titles, descriptions, dates, specialties, doctor references, and any files you choose to upload (PDFs, images).
• Technical data: minimal logs required to operate the service (e.g. request timestamps, error traces).

We do not collect analytics, advertising identifiers, or third-party tracking data.

2. How we use your information

• To provide the MedVault application and its features to you.
• To authenticate you and keep your account secure.
• To respond to your support requests.

We do not sell your data. We do not use your medical records to train machine learning models.

3. Storage and security

Data is stored using a managed backend infrastructure provider. Records are protected by row-level access controls so that only your authenticated session can read or write your data. Uploaded files are stored in a private bucket accessible only through short-lived signed URLs issued to you.

Data is encrypted in transit (HTTPS/TLS) and at rest by the underlying infrastructure provider.

4. Subprocessors

We rely on the following categories of subprocessors to operate MedVault:

• Managed database, authentication, and file storage (backend infrastructure).
• Google, only if you choose to sign in with Google.
• Application hosting and content delivery.

5. Data retention and deletion

Your records are retained for as long as your account exists. You can delete individual records and files at any time from within the app. To delete your entire account and all associated data, contact us — see Contact.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. To exercise any of these rights, contact us and we will respond within a reasonable time frame.

7. Children

MedVault is not intended for use by children under 13 (or the equivalent minimum age in your jurisdiction) without a parent or guardian.

8. Changes to this policy

We may update this Privacy Policy. Material changes will be highlighted at the top of this page along with a new "Last updated" date.

9. Contact

Questions? Reach us via the Contact page.