Privacy Policy

1. Scope

This Privacy Policy explains how MEDA ("MEDA," "we," "us," or "our") collects, uses, discloses, and protects information when you visit MEDA.care, request early access, or use a MEDA TestFlight beta or related testing service.

The current beta is a development demonstration. It is not approved for real patient information, does not provide emergency services, and must not be used to establish or manage real clinical care.

2. Information we collect

Information you provide

• Early-access information: name, preferred name, email address, area of interest, and communication consent.
• Account information: sign-in identifiers, authentication records, and account preferences.
• Beta content: fictional or synthetic profile details, test conversations, feedback, and screenshots you choose to submit.

Information collected automatically

• Usage and technical information: app version, device type, operating-system version, session timing, feature activity, error logs, and security events.
• Notification information: device-registration tokens and delivery status used to provide generic MEDA alerts.
• Website information: basic request and diagnostic data needed to operate, secure, and improve MEDA.care.

3. How we use information

We use information to:

• review and administer early-access requests;
• create and secure test accounts;
• operate Emily and other beta features;
• send invitations, account messages, and generic notifications;
• measure reliability, investigate errors, and prevent misuse;
• review tester feedback and improve MEDA; and
• comply with applicable legal and security obligations.

MEDA does not sell personal information or use it for third-party targeted advertising.

4. How information is disclosed

We may disclose information to service providers that help us run MEDA, including providers of hosting, authentication, email, notifications, conversational-avatar technology, analytics, security, payment processing when enabled, and Apple's TestFlight service. These providers process information for the services they perform for MEDA and are subject to their own terms and privacy obligations.

We may also disclose information when required by law, to protect users or MEDA, to investigate fraud or security threats, or as part of a merger, financing, acquisition, or similar business transaction subject to appropriate safeguards.

5. Synthetic information and healthcare privacy

The current beta is deliberately limited to fictional or synthetic information. It is not configured or authorized for protected health information. Do not enter real symptoms, diagnoses, medications, laboratory results, contact details, or other information that could identify a patient.

Before MEDA permits real patient information, we intend to update this policy, complete the required healthcare privacy agreements and safeguards, and provide any additional notices and consents required for the applicable service.

6. Retention and deletion

We retain information for as long as reasonably necessary to operate the beta, maintain security and audit records, respond to requests, and meet legal obligations. Retention periods vary by information type and purpose. We may de-identify or aggregate information so it can no longer reasonably identify you.

You may request access, correction, or deletion of your early-access or beta account information by contacting us. We may retain limited records when legally required or reasonably necessary for security, fraud prevention, or dispute resolution.

7. Security

MEDA uses administrative, technical, and organizational safeguards designed to protect information. No storage or transmission system is completely secure, and the current beta remains subject to the synthetic-information-only restriction described above.

8. Your choices and rights

You can unsubscribe from product and early-access updates using the instructions in those messages. Depending on where you live, you may also have rights to request access to, correction of, deletion of, or information about the processing of your personal information. We may need to verify your identity before completing a request.

9. Children

MEDA's current beta is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and address the request.

10. Changes to this policy

We may update this policy as MEDA changes. The effective date at the top of this page identifies the current version. Material changes will be communicated through an appropriate notice before they take effect when required.