Privacy Policy

On your device by default

Medications, schedules, dose history, notes, refill details and settings are stored on your phone. With Cloud Backup off (the default), none of this is sent to us, and the app does not create any account.

Reminders are local notifications scheduled on your phone. We do not use a push-notification service.

Cloud Backup (optional, off by default)

When you turn on Cloud Backup in Settings, the app creates an anonymous account (no email or password) and stores a copy of your data in your private area of our cloud database (Google Firebase / Cloud Firestore):

• Medication details: name, dose, form, schedule and times, supply and refill details, prescriber, pharmacy name and phone.
• Dose history: when each dose was taken, skipped or snoozed, and any notes.
• The name you enter in Settings, your device time zone (so dose times are right on our servers) and app settings.

This data is encrypted at rest by Google Cloud. It is not end-to-end encrypted: our service can access it to keep your devices in sync and to run Care Circles. Google Cloud servers may be located outside Canada, including in the United States.

Care Circles (optional)

Care Circles let family or carers you invite see your medication schedule, doses taken and refill status. They require Cloud Backup.

• Caregivers see only medications you have not hidden. Hidden medications are never shown to them.
• Caregivers can only view, and add check-in notes that you can see. They cannot change your medications.
• Every time a caregiver views or exports your information, it is recorded in the circle's activity log, which you can see.
• Invite codes expire after 15 minutes. You can remove a caregiver at any time and their access ends immediately.

Connected apps: Muse (optional)

You can connect Muse, Meta's AI assistant, to MediScan Pro in Settings > Connected apps. It requires Cloud Backup, and nothing is connected until you approve it in the app with a one-time code shown by Muse.

• When you ask Muse about your medications, Muse reads them from your cloud account and that information is sent to Meta. Meta handles it under its own privacy policy.
• Depending on what you approve, Muse can read your own medications and doses, update them (for example, mark a dose as taken), and read the schedules of people you care for in Care Circles. It can never change their information, and hidden medications are never shared.
• When you use Muse to look at the schedule of someone you care for, it is recorded in their Care Circle activity log.
• We keep a record of each connection (the app's name, when it was connected and last used) so you can see it and disconnect it. Disconnecting in Settings > Connected apps, or Delete Cloud Backup, ends Muse's access at once.

Label scanning

When you choose to scan a pharmacy label, the photo is sent to our server and to Google Cloud Vision to read the text. The text comes back to your phone so you can check it. MediScan Pro does not store the photo.

Medication lookups (FDA and Health Canada)

To show label information and safety notices, the app sends medication names to public government services: openFDA (U.S. Food and Drug Administration) and Health Canada's drug database. Like any web request, these services also see your device's IP address. No other information is sent. You can turn these lookups off in Settings > Drug Safety (FDA Label Search, Health Canada Search).

Anonymous usage statistics (optional, off by default)

If you choose to share usage statistics (during setup, in Settings, or in the What's new screen), the app records a small, fixed set of events: app installed, app opened, setup completed, session started, screen viewed, feature used and a retention check. These carry a random ID created by the app for this installation (and your account ID on session records if Cloud Backup is on), the app version and platform. They never include medication names, doses or any health details.

Turning this off stops collection and deletes the statistics already recorded for your installation.

Voice logging

When you tap "Log a dose by voice", the app uses Apple's speech recognition to turn what you say into text; Apple handles the audio under its own privacy policy. The text is used on your phone to log the dose. We do not receive your voice or the transcript. The microphone is used only while you are logging by voice.

Feature waitlist

If you join a waitlist for an upcoming feature, we store the email address you enter with the feature name and device type, and use it only to tell you when that feature launches.

What we never do

• We do not sell your data or share it with advertisers or data brokers.
• We do not show ads, use advertising identifiers or track you across other apps and websites.

Deleting your data

• Cloud data: Settings > Cloud & Backup > Delete Cloud Backup deletes everything in your cloud account (medications, dose history, backup, profile, Care Circles, connected apps and session records) and the anonymous account itself, then turns Cloud Backup off. Data on your phone stays.
• Connected apps: Settings > Connected apps > Disconnect ends an app's access. Information Muse already received is held by Meta; see Meta's privacy policy to delete it there.
• Usage statistics: turning them off in Settings deletes what was recorded.
• Data on your phone: Settings > Data Management > Clear All Data, or delete the app.
• Waitlist email: write to us at the address below and we will remove it.

Children

MediScan Pro is not directed at children under 13, and we do not knowingly collect their information.

Changes and contact

If we change what the app sends or stores, we will update this policy and the date below before the change reaches you.

Questions, access or correction requests, or deletion requests: admin@clinsolservices.com.