Privacy Policy

Effective date: June 24, 2026

Medivano is designed to help users store, organize, and access medical records, health profile information, emergency details, and doctor visit preparation materials. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices available to users.

Health information is sensitive. Please do not use Medivano unless you are comfortable with the practices described here.

India data protection role

For users in India, Medivano acts as a data fiduciary for personal data processed to provide the service. Users are data principals. Some infrastructure, document processing, analytics, notification, support, and payment providers may act as data processors for Medivano.

Information we collect

We may collect the following categories of information when you use Medivano:

• Account information, such as your name, mobile number, email address, login identifiers, and authentication details.
• Health profile information, such as age, gender, blood group, allergies, medicines, conditions, emergency contacts, family member profiles, and similar details you choose to provide.
• Medical records and files, such as prescriptions, lab reports, scans, discharge summaries, invoices, images, PDFs, and extracted text or metadata from those files.
• App activity and device information, such as upload events, feature usage, notification interactions, device type, operating system, app version, crash data, and diagnostic logs.
• Payment and subscription information, such as plan status, payment confirmation details, transaction identifiers, and billing metadata received from payment processors.
• Support communications, such as messages, attachments, and contact details you provide when you contact us.

How information is used

We use information to provide and improve Medivano, including to:

• Create and secure user accounts.
• Upload, process, store, classify, and display medical records.
• Extract useful details from documents and ask users to review them.
• Create health timelines, emergency profiles, and doctor visit summaries.
• Manage family or dependent profiles at the user's direction.
• Send account, security, upload, review, subscription, and reminder notifications.
• Operate subscriptions, payments, support, analytics, debugging, fraud prevention, and service reliability.
• Comply with legal obligations and respond to lawful requests.

Medical records and extracted information

Medivano may use automated processing to read and structure uploaded medical documents. Automated extraction can be incomplete or inaccurate. Users should review important details before relying on them, sharing them, or using them for a doctor visit.

Medivano does not provide medical advice, diagnosis, treatment, emergency response, or a replacement for consultation with qualified healthcare professionals.

How information is shared

We do not sell personal health information. We may share information only in the following limited situations:

• With service providers that help us host infrastructure, process documents, send notifications, analyze reliability, provide support, or process payments.
• With healthcare providers, caregivers, family members, or other recipients only when a user chooses to export, share, or show information.
• When required to comply with law, legal process, safety, security, fraud prevention, or protection of rights.
• As part of a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate confidentiality and data protection safeguards.

Third-party services

Medivano may rely on third-party services such as cloud hosting, document processing, analytics, push notifications, and payment providers. These providers process information only for the services they perform for us, subject to their applicable terms and privacy commitments.

If a provider processes information outside India, we take steps designed to protect the information and limit processing to the purpose for which the provider was engaged.

Security

We use administrative, technical, and organizational safeguards designed to protect user information. No system can be guaranteed to be completely secure. Users should keep their devices, OTPs, passwords, and account access protected.

Medivano records sensitive actions such as uploads, file access, sharing, consent changes, and deletion requests in audit logs used for security, support, and compliance.

Retention

We keep information for as long as needed to provide Medivano, maintain user accounts, comply with legal obligations, resolve disputes, prevent misuse, and enforce our terms. If a user deletes an account or requests deletion, we will delete or de-identify associated information unless retention is required for legal, security, fraud prevention, backup, accounting, or regulatory reasons.

Account and data deletion

Users may request deletion of their Medivano account and associated data from the Delete Account page or by emailing privacy@medivano.com. We may need to verify the request before acting on it.

User rights and choices

Depending on applicable law, users may have rights to access, correct, update, delete, export, or withdraw consent for certain personal data. Users may also contact us with privacy questions, complaints, or requests for grievance redressal.

Where processing is based on consent, users can withdraw consent through available app controls or by contacting us. Withdrawal may limit features that depend on the withdrawn consent, such as document extraction, reminders, or sharing.

Children and family profiles

Medivano may allow an adult account holder to create or manage health profiles for family members or dependents. The account holder is responsible for having the authority or consent needed to add and manage another person's information. Medivano is not intended for unsupervised use by children.

International processing

Information may be processed and stored in countries where we or our service providers operate. We take steps designed to protect personal information when it is transferred or processed across borders.

Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users through the app, website, or other appropriate channels.

Contact

For privacy questions, data requests, or complaints, contact privacy@medivano.com.