Privacy Policy

Medicine Passport is a product of MediDocs, operated by [LEGAL ENTITY TO BE CONFIRMED BEFORE LAUNCH]. Medicine Passport helps you record your medicines and related health information and share a summary with a doctor or pharmacist when you want to.

Medicine Passport is not a doctor and does not give medical advice. It does not diagnose, prescribe, or tell you to start, stop, or change any medicine.

To create and use your account, we collect:

• Your phone number — used to sign you in with a one-time code. We store it in an encrypted form, not as plain text.
• An email address — only if you choose to add one.
• Profile details — a name or label for each person's record, and optionally a year of birth and sex. We ask for the year of birth, not a full date.

Because Medicine Passport is a medicine record, you can add health information such as: medicines and doses, why you take them, the prescribing doctor's name, reminders and whether doses were taken, allergies, conditions, blood-sugar readings, check-up measurements (like blood pressure or HbA1c), and test reports. You decide what to add — most of it is optional.

Medicine Passport keeps your record; it does not analyse it to diagnose you or flag results as high or low.

You can keep a record for someone you care for (for example, a parent or child), and you can invite a caregiver to help manage a record. When you invite a caregiver, we record the relationship and the specific permissions you grant, and you can change or revoke them at any time. A "caregiver" in the app is a person you have chosen to give access to — it is not the same as a legal guardian.

You can take or upload photos of prescriptions, medicine strips or boxes, and test reports. These are stored privately and are only accessible to you and the caregivers you allow.

If you use the scan-to-add feature, the text on a document is read on your own device to suggest medicine details — the image is not sent to an outside text-reading service, and you confirm every detail before it is saved.

When you choose to share, Medicine Passport creates a link or QR code that shows a summary of the sections you selected. The person you share with does not need a MediDocs account. You can set the link to expire and you can revoke it.

Important: revoking a link stops future access through Medicine Passport. It does not delete or claw back a copy that someone has already opened, downloaded, or saved (for example, a PDF they kept). We keep a log of accesses so you can see when a link was used.

If you fill in our "for doctors & clinics" form, we collect the business contact details you provide (name, organization, role, city, and an email or phone) and your message, so we can follow up. This form is for professional inquiries — please do not include any patient health information in it.

On our public website, we use Cloudflare Web Analytics to understand overall traffic and page performance. It measures aggregate visits and speed — it does not use cookies for tracking and does not receive your health information. If you arrive from a link that includes ?src=website, we record only the value "website" on your account so we can understand where sign-ups come from. We never store the referring site, advertising codes, or any other free text there.

We do not run marketing analytics inside the patient app or on your shared record pages.

• To sign you in and keep your account secure.
• To store and show your medicine and health record to you and the caregivers you allow.
• To send reminders you have turned on.
• To let you share a summary with a doctor or pharmacist when you choose.
• To respond to your requests and to keep the service safe and working.

We use a small number of trusted providers to run the service:

• Hosting and database — to run the app and store your record securely.
• Cloudflare — for our network, security, our public-website analytics, and our private document storage and encrypted backups.
• Telnyx — to deliver your one-time sign-in code by call or message. It receives your phone number for that purpose.

These providers act on our instructions. We do not sell identifiable patient health information, and we do not show advertising in the patient Medicine Passport experience. (These commitments are our policy; their final published wording is under legal review.)

We are confirming the exact locations where our providers store and process data, and will state them clearly here before launch. [PROCESSING LOCATION — TO BE CONFIRMED WITH PROVIDERS.] We will not claim a location we have not verified.

We use concrete safeguards, including: encrypted connections; encryption of sensitive fields such as your phone number; storing sign-in and share codes only as one-way hashes (never the raw code); private document storage with access logging; expiring, revocable share links; bot protection and rate limiting on sign-in and forms; and a tamper-evident audit log. No online service can promise perfect security, and we do not claim to be "fully secure" or "bank-grade" — but we take protecting your information seriously.

We keep information only as long as we need it:

• Your profile and medicine/health records: while your account is active, so they are there when you need them.
• Your documents: while you or your account still need them.
• If you ask us to delete your data: we remove it from our active systems within 30 days.
• Secure backups: any deleted data ages out of backups within about 90 days, and we do not restore it for ordinary use after deletion (only if genuinely required for disaster recovery, security, or the law).
• Some technical data is cleared automatically — for example, old sign-in codes and expired sessions.

These periods are our current policy and are still being confirmed with legal review.

You can:

• See your information — it is in the app.
• Correct or update it — you can edit your records.
• Withdraw consent — for example, revoke a share link or a caregiver's access.
• Ask us to delete your information (see below).
• Raise a concern or complaint about how your information is handled.

Some of these you can do yourself in the app; others you can ask us to do for you. To make a request, use the contact details below.

You can delete individual records in the app. To delete your whole account and record, you can send us a request. We will confirm it is you, sign you out everywhere, stop any active shares, and remove your eligible records and documents from our active systems within 30 days. We will confirm what was deleted and note anything we must keep for legal or security reasons. Copies in our secure backups age out within about 90 days and are not restored for ordinary use. We do not promise instant or absolute deletion.

A child's Medicine Passport is meant to be set up and managed by a parent or lawful guardian. Medicine Passport is not intended for a person under 18 to run as their own adult account, and we do not target advertising at children or track them for behavioural profiling.

Indian law sets specific requirements for the personal data of people under 18, including verifiable consent from a parent or lawful guardian. We are strengthening how we confirm a parent or guardian's role, and will describe it fully here before launch.

Apart from the sharing you choose and the providers listed above, we may disclose information if required by law or to protect the safety and security of people or the service. We do not sell your identifiable health information.

We may update this policy. When we make a meaningful change, we will update the date at the top and, where appropriate, let you know.

For any privacy question, request, or complaint, you will be able to reach our privacy contact here. [CONTACT: privacy channel — NOT YET PROVISIONED — OD-LP-7.] We are setting up this channel and a grievance process before launch. This draft does not list a contact address because we do not publish an address that is not yet monitored.