Your privacy matters to us

MedicaCare AI is a product owned and operated by MedicaCare Billing Inc., a company incorporated in Ontario, Canada. We provide a mobile application ("MedicaCare AI") that uses artificial intelligence to help users understand their health reports in plain language.

Contact us at medicacareapp@gmail.com for any privacy-related questions.

Information you provide

• Account information: Name, email address, password (hashed — we never see it), role (patient or doctor), and optional profile details such as date of birth and blood type.
• Health reports: Medical documents (PDF, images) you upload for AI analysis. These are stored encrypted in our cloud infrastructure.
• Voice notes (doctors only): Audio recordings you make for SOAP note generation. Audio is transcribed immediately and the file is not retained.
• Chat messages: Conversations with MedicaCare AI, stored to maintain your session history.
• Support messages: Content of any support tickets you submit.
• Family profiles: Names, relationships, and optional birth dates of family members you add.

Information collected automatically

• Device token: A push notification token to send you alerts when your report analysis is complete.
• Country/locale: Detected from your device to personalise language and regional content.
• Usage data: Report upload counts and feature usage to enforce free-tier limits and improve the product.

• To analyse your health reports using AI and return an explanation to you.
• To generate SOAP notes from physician voice recordings (doctor accounts only).
• To maintain your personal health profile and report history within the app.
• To send push notifications about the status of your report analysis.
• To respond to your support requests.
• To enforce usage limits on the free tier and manage subscriptions.
• To improve MedicaCare AI's features, accuracy, and performance (using aggregated, de-identified data only).

We do not sell your personal information or health data to any third party. We do not use your data for advertising.

MedicaCare AI is powered by a combination of proprietary AI models developed by MedicaCare AI and licensed large language models from leading AI research companies. We are continuously developing our own medical AI infrastructure to provide you with the most accurate and private experience possible.

To deliver our services, your data may be processed by trusted third-party technology partners under strict data processing agreements and confidentiality obligations. These partners assist with:

• AI model inference: Your uploaded reports, chat messages, and voice recordings are processed by AI models to generate responses. Data is transmitted encrypted and is not used to train third-party models.
• Cloud infrastructure: All user data and health reports are stored on encrypted servers located in the European Union (Germany), ensuring compliance with GDPR data residency requirements.
• Subscription management: In-app purchases and subscriptions are managed by a certified payment and subscription platform. We share only an anonymous user identifier — no health data is shared with any payment processor.

We do not disclose the specific names of our technology partners publicly. If you require this information for compliance purposes, contact us at medicacareapp@gmail.com.

• All data is stored on encrypted servers in the EU (Frankfurt, Germany) via Supabase.
• Health reports are stored in a private, non-public storage bucket with row-level security — only you can access your own files.
• All API keys (Claude, OpenAI) are stored as server-side secrets and are never included in the app binary or transmitted to your device.
• Authentication uses Supabase Auth with JWT tokens. Passwords are hashed and never stored in plain text.
• All data is transmitted over TLS/HTTPS.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via the app's profile settings.
• Delete your account and all associated data. You can request deletion via the app (Profile → Privacy & Security → Delete Account) or by emailing medicacareapp@gmail.com.
• Export your data in a portable format.
• Opt out of push notifications at any time via your device settings.

Residents of the EU/EEA have additional rights under GDPR. Canadian residents have rights under PIPEDA. To exercise any right, email medicacareapp@gmail.com.

We retain your data for as long as your account is active. If you delete your account:

• Your profile, reports, analyses, chat history, and family profiles are permanently deleted within 30 days.
• Support ticket records may be retained for up to 12 months for legal and dispute resolution purposes.
• Anonymised, aggregated usage statistics (no personal data) may be retained indefinitely.

MedicaCare AI is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us at medicacareapp@gmail.com and we will delete the account promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via the app and/or email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the app after changes take effect constitutes acceptance of the updated policy.

For any questions about this policy or your data: