MedoraFor the Medora app (patients) and the Medora Care app (doctors and clinic staff).
Who we are
Medora and Medora Care are run by App Dev Labs, [postal address] ("we"). Clinics and doctors use Medora Care to look after you; you use Medora to see your health information, talk to your care team and book visits. Questions about privacy: care@medora-medical.com.
What we collect
- Account: your name, email, phone, date of birth, sign-in details (a scrambled password, or your Google or Apple sign-in), and the clinics you're linked to.
- Health information: what you and your care team add — intake answers, medical history, medicines, allergies, lab results, visit notes, prescriptions, vitals and charts.
- Apple Health / Health Connect: only if you allow it, readings such as steps, heart rate, sleep and weight, to show your trends and bio age.
- Messages and calls: chats with the Medora assistant and your care team, and audio calls with your doctor (recorded and transcribed for your record when your doctor uses that feature).
- Visits (Medora Care): when a doctor uses the scribe, the visit's audio is turned into text and draft notes.
- Doctors and staff: name, role, contact details, specialty and medical registration (to verify doctors), working hours, and scribe settings.
- Device and usage: a notification token for your phone, and which screens are used and errors that happen, to keep the apps working. No advertising identifiers.
How we use it
- To run the apps: show your records, connect you with your care team, book visits, send notifications.
- To help with AI: summaries, answers about your results, visit notes and your doctor's day brief. A doctor always reviews what goes into your record.
- To keep accounts safe, verify doctors, and fix problems.
We don't sell your information, don't use it for advertising, and don't share Apple Health or Health Connect data for any purpose other than showing it to you and your care team.
Who else sees it
- Your care team: the doctors and staff at clinics you're linked to.
- Service providers who process data for us under contract, only to provide the apps: DigitalOcean (servers and database, in Bangalore, India); Anthropic (the AI that writes summaries and answers — it may be processed in the USA and isn't used to train their models); Zoho (sending emails); Apple and Google (sign-in, notifications, and voice typing on your phone).
- When the law requires it.
Notifications only say things like "New message from your doctor" — no medical details pass through Apple or Google.
How we protect it
Everything travels encrypted (HTTPS), the database is encrypted and reachable only from our own servers, each part of the system can reach only the data it needs, and what our operations team does is logged.
How long we keep it
While your account is open. Clinics must keep medical records for a number of years by law, so when you delete your account those records are moved out of the apps into a secure archive instead of being destroyed.
Your choices and rights
- See and correct your details in the app (Profile), or ask us.
- Turn off Apple Health / Health Connect, notifications or the microphone in your phone's settings at any time.
- Delete your account: in the app, Profile → Delete my account.
- Under India's Digital Personal Data Protection Act you can also ask what we hold about you, withdraw consent, name someone to act for you, and complain to us or to the Data Protection Board of India.
Children
Medora is for adults. A parent or guardian manages a child's care with the clinic.
Grievance officer
[name], App Dev Labs, [postal address] — care@medora-medical.com. We reply within 30 days.
Changes
If we change this policy we'll publish the new version here and ask you to accept it in the app.