Privacy Policy

Your health information is yours. This policy explains exactly what MediCoord AI collects when you use the app, why we need it, and how it's protected — in plain language.

Information we collect

• Account information — your email address, and if you sign in with Google, the basic profile info Google shares with us.
• What you describe in chat — the symptoms and messages you send, plus the severity assessment and facility recommendation generated in response.
• Location — your device's location, only if you grant permission, used to find facilities near you and calculate travel time.
• Emergency contact — a name and phone number you optionally provide, used only when you choose to message that contact yourself.
• Medical profile — allergies, pre-existing conditions, and blood type that you optionally enter during or after onboarding. This information is stored in your profile and sent to the AI assistant only if you enable the "Let the AI assistant use this during triage" toggle.
• Device and usage data — basic error and performance data collected automatically to keep the app working (see "Error tracking" below).
• Push notification subscription — if you enable notifications, a subscription identifier used to deliver them.

How we use your information

We use this information to assess the severity of what you describe, find and route you to an appropriate facility, maintain your conversation history so you can return to it, and keep the app secure and working reliably. Your symptom descriptions are sent to a third-party AI language model provider solely to generate the severity assessment and conversational response — they are not used to train any model on our behalf. If you have enabled the medical profile opt-in, your allergies, conditions, and blood type are also included in the context sent to the language model to improve triage accuracy.

How we store your information

Your account, profile, and conversation data are stored in our database (Supabase) with row-level security, meaning only you (and our service backend) can access your records. We use Sentry for error tracking and session replay; session replay masks all text content, so it never captures what you typed.

Who we share information with

We do not sell your information or share it for advertising. We share data only with the service providers that make the app work: Supabase (database and authentication), Sentry (error tracking), OneSignal (push notifications), and the AI language model provider used for symptom triage. Each only receives what it needs to perform its function.

Your choices

• You can disable location access at any time in your browser or device settings — the app will still work, but can't route you to nearby facilities.
• You can disable push notifications at any time in your browser or device settings.
• You can sign out at any time from the account menu.
• To request access to or deletion of your data, contact us using the details below.

Who this is for

MediCoord AI is designed for adults 16 and over. We do not knowingly collect information from anyone under 16.

Changes to this policy

If we change how we collect or use information, we'll update this page and change the "Last updated" date above.

Contact us

Questions about this policy or your data? Reach out through the contact details on our home page.