Privacy Policy

1. The short version

• We collect the minimum data needed to deliver the service.
• We never sell your data and we don’t show ads. We use a small set of privacy-respecting, consent-gated analytics and attribution tools — never advertising profiles — and you can opt out in the app.
• Your data is encrypted in transit (TLS) and at rest.
• You can export or delete your data at any time, directly from the app or by writing to us.

2. What we collect

We collect three categories of information:

• Account information - your name, email address, phone number, profile photo and authentication identifiers (e.g. Firebase Auth UID) when you create an account.
• Healthcare interaction data - appointment bookings, pharmacy interactions, saved providers and notification preferences.
• Device and usage data - anonymised device model, OS version, app version, approximate location (city-level) for environmental health, and aggregated usage events to improve the product.

3. What we don’t collect

• We do not collect detailed clinical records, prescriptions or lab results.
• We do not use third-party advertising networks or build advertising profiles of you.
• We do not sell, rent or trade your personal information to anyone.

4. How we use information

We use your information to:

• Provide the core features (appointments, pharmacy search, environmental data, notifications);
• Authenticate you securely and prevent fraud or abuse;
• Communicate with you about your appointments, refills and service updates;
• Improve the product through aggregated, de-identified usage analytics;
• Meet legal obligations and respond to lawful requests.

5. Sharing

We share information only in these limited circumstances:

• With healthcare providers you choose to interact with, such as a clinic you book with - and only the data needed to confirm or fulfil the booking.
• With trusted infrastructure partners (e.g. Firebase, cloud database providers) that process data on our behalf under strict data-processing agreements.
• With analytics & attribution providers (PostHog for product analytics, AppsFlyer for measuring which channel referred an app install) that receive only de-identified usage events and attribution identifiers — never your health records. These are gated behind your in-app analytics consent and can be switched off at any time.
• When required by law - for example, in response to a valid legal request, or to protect the rights, safety or property of Medico24 or others.

6. Security

We take security seriously. All traffic is encrypted in transit using TLS, sensitive data is encrypted at rest, and access to production systems is restricted, logged and monitored. While no system is perfectly secure, we follow industry best practices and continually invest in keeping your data safe.

7. Data retention

We retain your information for as long as your account is active and for a limited period afterwards as needed for legal, accounting or operational purposes. When you delete your account, we delete or anonymise your data within 30 days, unless we are legally required to retain it longer.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion of your data;
• Object to or restrict certain types of processing;
• Withdraw consent at any time, where processing is based on consent;
• Port your data to another service.

You can exercise these rights directly from the app, or by writing to legal@medico24.in.

9. Children

Medico24 is intended for adults. We do not knowingly collect personal information from children under 13 (or the relevant age threshold in your jurisdiction). Family-profile features are designed to be managed by a responsible adult on behalf of children or dependents.

10. International transfers

Medico24 may process and store data in countries other than your own. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required to protect your information during international transfers.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date above and, for material changes, notify you in the app or by email.

12. Contact

Questions about your privacy or this Policy? Reach us at legal@medico24.in, or visit our contact page.