Privacy Policy

1. Introduction

MediQuestAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information, including but not limited to:

• Name and email address
• Account credentials
• Profile information
• Contact information

2.2 Health Information

Our Service allows you to input and track health-related information. This may include:

• Sleep patterns and sleep tracking data
• Health metrics you choose to record
• Symptoms and health concerns you report
• Fitness and activity data
• Diet and nutrition information

2.3 Usage Data

We automatically collect certain information when you use the Service, including:

• Device information (type, operating system, unique identifiers)
• Log data (access times, pages viewed, app features used)
• Location data (only if you grant permission)
• Analytics data to improve our Service

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Personalize your experience
• Generate health insights and recommendations
• Communicate with you about the Service
• Improve and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party companies that help us operate the Service (e.g., cloud hosting, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Request your data in a portable format
• Opt-out: Opt out of certain data processing activities

To exercise these rights, please contact us at privacy@mediquestai.com or use the account deletion feature in the app settings.

Analytics, Error Monitoring & Account Emails

To keep MediQuest reliable and easy to use, we rely on a small set of privacy-preserving analytics and error-monitoring tools. Their use is strictly limited to coarse, non-clinical signals:

• Product analytics (PostHog): We use PostHog to understand coarse, non-clinical usage — such as sign-ups, sign-ins, checkout, and visits to non-clinical pages — so we can improve the app. Events are identified only by your account ID, never by your name or email.
• Error monitoring (Sentry): We use Sentry to detect and diagnose technical errors. Reports are tied to your account ID only; request contents, cookies, and IP addresses are not sent.
• Session replay: Session replay is turned off by default. If it is ever enabled, all text and inputs are masked and media is blocked, and consultation, chat, and medical-record screens are excluded entirely.
• Account emails: We may send occasional non-clinical account emails (for example getting-started, billing, and re-engagement). Every one includes a one-click unsubscribe link, and you can opt out at any time.
• Your controls: You can unsubscribe from account emails using the link in any such email and manage your preferences in your account settings.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time. After account deletion, we will delete or anonymize your information within 30 days, except where retention is required by law.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: