Privacy Policy — MediScanAI

Effective Date: September 7, 2026
Last Updated: September 9, 2026
App Name: MediScanAI – Smart Health Assistant
Developer: MediScanAi (MediScanAi-official)

1. Introduction

MediScanAI ("we", "our", or "the app") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, how we store it, and your rights under applicable law — including the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

By using MediScanAI, you agree to the practices described in this policy.

2. What Data We Collect

2.1 Account Data (Firebase Authentication)

• Email address
• Display name (optional)
• Profile photo URL (if signed in with Google)
• Unique Firebase User ID (UID)

This data is used only for login/authentication purposes.

2.2 Health & Medication Data (Stored Locally on Your Device)

• Medicine reminder names, dosages, and schedules you create
• Doses marked as taken or missed (medication adherence log)
• Lab report scan results you choose to save
• Nutrition scan history
• Symptom check history (Dr. Chat conversations)

⚠️ This data never leaves your device. It is stored locally using your device's storage. We do not upload, sync, or transmit your health data to any server.

2.3 Voice Input

• Voice transcripts are processed temporarily to convert speech to text
• No voice recordings are stored permanently
• Voice data is never uploaded to our servers

2.4 App Preferences & Settings

• Language preference
• Theme (dark/light)
• Notification settings
• First-launch status

2.5 Anonymous Usage & Diagnostics (Firebase Analytics, Crashlytics & Performance)

To keep the app stable and understand which features are useful, we collect anonymous, aggregated data via Google Firebase:

• Crash reports & errors (Crashlytics) — stack traces, device model, OS version, and a random app-instance ID. Tied only to your Firebase UID, never your name or email.
• Feature-usage events (Analytics) — coarse counters such as "a tool was opened", "a reminder was created", "a scan completed", "onboarding finished", "the upgrade screen was viewed". We never send the content — no medicine names, no message text, no health data, no free-form input — only the event name and a category label.
• Performance traces (Performance Monitoring) — app start time and network request timings.

This data is processed by Google as our data processor and is not used for advertising. If you would like this disabled for your install, contact us at the email in Section 12.

2.6 In-App Feedback

If you use Settings → Send Feedback, your message opens in your own email app. Whatever you choose to send (your message, plus the app version and device model we pre-fill to help us debug) goes directly to our support inbox by email — there is no server in between.

3. What We Do NOT Collect

• We do NOT collect your precise location for tracking (a one-time coarse fix is used only when you tap "Share Live Location" in Emergency SOS, and is never stored)
• We do NOT use advertising SDKs, tracking pixels, or cross-app identifiers
• We do NOT build advertising or marketing profiles about you
• We do NOT send your health data, medicine names, or message content to analytics
• We do NOT sell your data to third parties — ever
• We do NOT share your health data with insurance companies, employers, or marketers

4. Third-Party Services We Use

No advertising, marketing, or data-broker SDKs are used.

5. How We Use Your Data

We use your data only to operate the app features you use. No profiling, no advertising.

6. Data Storage & Security

• Health data → Stored locally on your Android device only
• Auth data → Stored securely on Firebase servers (Google Cloud, ISO 27001 certified)
• AI queries → Sent over encrypted HTTPS to Anthropic's API, not stored by us
• Local data is protected by your device's security (screen lock, encryption)

7. Data Retention & Deletion

• You can delete all your locally stored health data anytime: Settings → Clear Data
• You can delete your account at any time via the app's Settings screen
• On account deletion, your Firebase auth record is permanently removed
• Local device data is cleared when you uninstall the app or use Clear Data

8. Children's Privacy

MediScanAI is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has used this app and provided personal data, please contact us immediately at the email below.

9. Your Rights Under DPDP Act 2023

As per the Digital Personal Data Protection Act, 2023 (India), you have the right to:

• Access — Know what personal data we hold about you
• Correction — Request correction of inaccurate data
• Erasure — Request deletion of your personal data
• Grievance Redressal — Raise a complaint about data handling

To exercise any of these rights, contact us at: privacy@mediscanai.app

Our grievance officer can also be reached at our registered address: Ambernath, Thane, Maharashtra, India.

We will respond within 30 days of receiving your request.

10. International Users

MediScanAI is developed and operated from India. If you access the app from outside India, your data is processed in accordance with this policy and applicable local laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last Updated" date at the top
• Notify you via an in-app notification on next launch

Continued use of the app after changes means you accept the updated policy.

12. Contact Us

For privacy concerns, data requests, or grievances:

Email: privacy@mediscanai.app
App Name: MediScanAI
Developer: MediScanAi-official
Country: India

MediScanAI is committed to building technology that respects your privacy. Your health data is yours — we are just the tool.