Privacy Policy

Medsana ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Medsana mobile application.

1. Information We Collect

We collect the following information when you use Medsana:

• Account information: Your email address, internal account identifier, and profile name
• Health information: Medicines, dosages, schedules, medicine notes, adherence data, and AI-generated medicine guidance you choose to save
• Family member information: Names, relationships, and dates of birth for family members you add
• Usage data: Dose logging, amendment history, and medication history
• Optional AI content: Medicine-label images and structured medicine information you choose to submit
• Pharmacy and refill information: Pharmacy connections, sharing permissions, refill requests, refill status history, and related actions
• Notification information: Device push tokens, notification preferences, and delivery information needed to send reminders and pharmacy or refill updates
• Purchase history: Subscription status managed through Apple's App Store and RevenueCat

2. How We Use Your Information

We use your information solely to provide the Medsana service:

• To display your medication schedule and reminders
• To track your adherence and generate reports
• To send push notifications for medication reminders
• To generate PDF medical history reports
• To provide optional AI medicine-label scanning and medicine guidance when you consent
• To provide pharmacy connections and refill coordination that you request
• To process your subscription through Apple's In-App Purchase system

3. Optional AI Features

Medsana provides optional medicine-label scanning and medicine-guidance features powered by Anthropic's Claude API. Requests are authenticated and routed through Medsana's backend on Supabase before being sent to Anthropic.

Medicine-label scanning: When you capture a label and consent, Medsana sends the captured image and its image type to Anthropic so the medicine name, dosage, and package quantity can be identified. The image may contain health-related or personal information visible in the photograph. Medsana asks for consent before each label image is sent.

Medicine guidance: When you choose "Analyze with AI" and consent, Medsana sends the medicine name, dosage, number of doses per day, selected dose times, meal preference, notes entered in the medicine form, and the names of other medicines in the selected member's list. These details are used to generate informational timing, food, interaction, purpose, and side-effect guidance.

Medsana does not intentionally add your email address, profile name, family-member details, or Medsana account identifier to the content sent to Anthropic. However, information visible in a label photograph or entered in a free-form notes field will be included in the request. Please keep unrelated personal information out of label photographs and notes.

Medsana records limited account-linked service metadata, such as the type and number of AI requests and their timestamps, for authentication, security, and abuse prevention. AI-generated results may be stored with the medicine record when you save the medicine.

AI features are optional. You may decline and continue using manual medicine entry and all non-AI features. Label scanning asks for consent for every image. Medicine-guidance consent is stored locally for the signed-in account on that device.

You may withdraw saved medicine-guidance consent at any time through Settings → Privacy → AI Data Sharing. Medsana will then ask again before sending another medicine-guidance request. Withdrawal does not reverse processing that has already been completed.

For more information about Anthropic's processing practices, see Anthropic's Privacy Policy and Privacy Center.

4. Data Storage and Security

Your account data is stored using Supabase. We use encryption, authentication, authorization, and row-level security to restrict access to authorized accounts and services. If you approve a pharmacy connection, that pharmacy may access only the selected member information and permissions presented to you during connection until access is disconnected. A disconnected pharmacy no longer receives live access, although limited historical refill or service records may remain in its archive. No storage or transmission method can be guaranteed to be completely secure.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We do not display advertisements. Your health data is never shared without your explicit consent.

We only share data with:

• Supabase: For authentication, authorized data storage, backend functions, and security controls
• Anthropic: For optional medicine-label scanning and medicine guidance using the content described in Section 3
• Expo and Apple: For notification registration and delivery, including the device push token and notification content permitted by your settings
• RevenueCat and Apple: For subscription purchases, entitlement status, and restoration using an account-linked identifier
• Pharmacies you explicitly connect: For the selected member's medicine and refill information, and optional adherence information, according to the permissions you approve

6. Notifications

Medsana uses local notifications and, when enabled, push notifications delivered through Expo and Apple. Depending on your notification settings, a notification may include a medicine name, dosage, family-member name, pharmacy name, medication-course information, or refill status. You can hide notification details in Medsana's notification settings or disable notifications through iOS or iPadOS Settings.

7. Data Retention

Your account data is retained while your account is active and as needed to provide the service, maintain security, resolve disputes, and meet legal obligations. You may permanently delete your Medsana account and associated patient data through the Settings screen in the app. App Store subscriptions must be cancelled separately through Apple. You may also contact us at support@medsana.org with a privacy or deletion question.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request permanent deletion of your Medsana account and associated patient data, subject to applicable legal, security, and transaction-record retention requirements
• Withdraw consent for AI analysis at any time
• Disconnect a pharmacy and revoke its ongoing access to a selected member
• Export your medication history as a PDF from within the app

9. Children's Privacy

Medsana is intended for use by adults and caregivers. Adults may manage medicines for family members, including children. The app is not directed to children under 13, and children under 13 should not create their own account. If you believe a child has provided personal information directly to Medsana without appropriate authorization, contact us so we can investigate and remove it where required.

10. Medical Disclaimer

Medsana is for informational purposes only and does not constitute medical advice. Always consult your healthcare provider before making changes to your medication regimen. AI suggestions are informational only and should not replace professional medical advice.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the date at the top of this policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at support@medsana.org.