Privacy Policy
MedRec is currently offered as an independent application by its developer, based in Rawalpindi, Pakistan, and is not yet operated through a separately registered company. In this document, “MedRec,” “we,” “us,” and “our” refer to the developer(s) who operate the MedRec app and the medrecapp.com website.
Introduction
Your privacy matters to us, especially because MedRec stores sensitive medical information. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information we collect
- Account information — such as your name, email address, and phone number, when you create an account.
- Health records you add — lab reports, prescriptions, doctor's notes, and images or PDFs you upload or scan, along with the information our on-device OCR extracts from them (test names, results, medicine names, dosages, and similar details).
- Family profile information — details you add for family members whose records you manage under your account.
- Doctor consultation information — booking details (date, time, doctor) and payment confirmation for consultations you book.
- Payment information — payments are handled by our payment partner, Gopayfast. MedRec does not collect or store your full card or bank account details.
- Usage and device information — basic technical information such as device type and app crash or performance data, used to keep the app working reliably.
How we use your information
- To provide MedRec's core features: organizing your records into a timeline, on-device OCR scanning, and family profiles.
- To let you share your history with a doctor via QR code, only when you choose to.
- To let the Record Assistant answer questions using the records you've already uploaded.
- To process payments for the Family plan and doctor consultations, through Gopayfast.
- To operate, maintain, and improve the app, and to communicate with you about your account or support requests.
How your records are stored
Your medical records, including files you upload and any text our OCR feature extracts from them, are stored on MedRec's servers. Data is encrypted in transit between your device and our servers. Access to your records is restricted to your account and anyone you explicitly choose to share a record with, such as a doctor via QR code.
Record Assistant (no AI)
The Record Assistant reads the records already stored in your account to answer questions you ask it in plain language (for example, “when did I last get a CBC?”). It does not use artificial intelligence. Your medical information is confidential, and we do not give any third party, including AI service providers, access to it. The assistant only uses your own data, and it is never used to build a profile of you for advertising.
How we share information
We do not sell your personal or medical data to anyone. We only share information:
- With a doctor you choose to share your QR code or history with, or a doctor you book a consultation with — limited to what you've permissioned.
- With Gopayfast, to process your payments.
- With service providers who help us run the app (such as hosting), under an obligation to keep your data confidential and use it only to provide that service.
- If required to do so by law or a valid legal request.
Data storage and security
We use reasonable technical and organizational measures to protect your information, including encrypting data in transit and restricting access to your account. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.
Data retention and your rights
Your information is kept for as long as your account is active. You can, at any time:
- Access, update, or delete individual records within the app.
- Turn off or opt out of optional cloud sync.
- Request deletion of your entire account and associated data by emailing us at supportmedrec@gmail.com.
Family profiles
If you add a family profile (for example, for a parent or child), you are responsible for having the right to manage that person's health information, and for keeping it accurate. Family profiles are managed entirely by the account holder.
Children's privacy
MedRec does not allow children to create their own independent accounts. A child's records can only be kept as a family profile managed by an adult account holder.
International users
MedRec is designed primarily for use in Pakistan, and data may be processed and stored on servers located in Pakistan. If you use MedRec from another country, your information may be transferred to and processed in Pakistan.
Changes to this Privacy Policy
We may update this Privacy Policy as MedRec's features evolve. The “Last updated” date at the top of this page reflects the most recent changes.
Contact us
If you have any questions, you can reach us at:
- Email: supportmedrec@gmail.com
- Phone: +92 309 9837990
- Address: Rawalpindi, Pakistan