Privacy Policy

We do not collect location data, contacts, camera access, or any data beyond what you explicitly provide.

• Provide and maintain the MedVault service — storing, organising, and displaying your health records.
• Send one-time passwords (OTP) by email for account verification and login — no marketing emails.
• Authenticate your identity and keep your account secure.
• Respond to your support requests.
• Improve app performance and fix bugs using anonymised usage patterns.

We will never use your health data for advertising, profiling, or any purpose not listed above.

Health records are among the most sensitive personal data. We treat them accordingly:

• Your health records are stored encrypted on secure cloud infrastructure.
• Only you (and family members you explicitly add) can access your records.
• We do not sell, rent, or share your health data with any third party, advertiser, or data broker.
• Our staff do not access your records unless you contact us for support and explicitly grant permission.

Your data is stored on secure cloud servers located in the Asia Pacific (Mumbai) region. We implement the following measures:

• 256-bit encryption for data at rest and in transit (HTTPS/TLS).
• Passwords are hashed and never stored in plain text.
• Access to production systems is restricted to authorised personnel only.
• Regular security reviews and dependency updates.

We use a limited number of trusted third-party services to operate MedVault:

These providers act as data processors under our instructions and are contractually bound to protect your data. We do not share your health records with any of these services — only the minimum data needed for their specific function (e.g., your email address for OTP delivery).

We do not sell, rent, trade, or otherwise transfer your personal information or health data to any third party for commercial purposes. Your data is yours.

We may disclose information only if required by law (e.g., a valid court order), and we will notify you to the extent permitted by law.

You have the following rights regarding your personal data:

• Access — request a copy of all personal data we hold about you.
• Correction — update inaccurate information via the app's Profile screen.
• Deletion — request permanent deletion of your account and all associated data.
• Portability — request your health records in a portable format.
• Opt-out — you may stop using the service at any time.

To exercise any of these rights, contact us at support@medvault.co.in

MedVault is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Parents may add minor children as family members within their own account — in this case the parent's consent covers the minor's data.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you via the app or email if the changes are material. Continued use of MedVault after changes are posted constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: