Privacy Policy - Medicod

Medicod provides an informational service that helps users understand laboratory test results. This Privacy Policy explains what data we process, why we process it, and how users can contact us about privacy requests. The data controller for medicod.app is NWTC INC, 30 North Gould Street Ste R, Sheridan, WY 82801, USA.

1. Important Medical Disclaimer

Medicod is not a medical device, medical consultation, diagnosis, treatment, or emergency service. The app provides educational and informational explanations only. Always consult a qualified healthcare professional before making health decisions.

2. Data We Process

Uploaded lab report images, PDFs, or text needed to extract medical markers.
Medical marker names, values, units, and reference ranges.
Optional profile context such as age, sex, and health context if provided by the user.
Account identifiers, email address, app user ID, and purchase/unlock records.
Launch list email, preferred platform, page URL, site host, and referrer if you join the app launch list.
Technical data such as device, app version, logs, and crash reports.
Analytics events such as page views, button clicks, signup events, browser language, and traffic source.

3. Medical Data and AI Processing

Lab results and related health context may be sensitive health information. We use this information only to provide the requested report explanation, improve reliability, prevent abuse, process purchases, and support user requests.

Uploaded documents are processed to extract text. Personal strings such as names, phone numbers, addresses, and document numbers are removed where technically possible before AI analysis. AI output may be inaccurate or incomplete and must not be used as a medical diagnosis.

Before upload, Medicod requests consent to process sensitive health information through OCR and AI providers and to make cross-border transfers where those providers operate. Providers may be located in the United States, the European Union, or other countries. If you do not agree to this processing, do not upload a lab report. You may withdraw consent by contacting support, subject to records we must retain for legal, security, or transaction purposes.

4. Payments

Web payments are handled by Stripe. We receive the Checkout/payment identifier, status, amount, currency, customer email, and the internal analysis reference needed to unlock a report. For Google Play and Apple App Store purchases, payment processing is handled by the relevant app store and RevenueCat. We receive purchase identifiers and entitlement data needed to unlock the paid report. We do not receive or store full card numbers or CVC.

5. App Launch List

If you join the iOS or Android launch list, we use your email to notify you when the app becomes available and to understand platform demand. You can request removal by emailing support.

6. Sharing

We use service providers for hosting, OCR, AI processing, analytics, crash reporting, customer support, and purchase verification. They process data only as needed to provide the service. We do not sell personal data.

7. Retention and Deletion

We keep records only as long as needed for the service, security, legal, accounting, and support purposes. An uploaded source image or PDF is normally deleted after processing. If Medicod detects a recognition-quality issue, the source file may be kept in protected storage for no more than 14 days solely to investigate and correct that issue, and is then deleted. Generated reports may remain available until the user deletes them. Minimal payment, consent, security, and deletion records may be retained where required to meet legal obligations or establish that a request was fulfilled. Users can request deletion of their account and related data in the app or through the account deletion page.

Access-restricted security backups may contain deleted records for up to 14 days. They are not restored except for disaster recovery; after an isolated restore, deletion requests are reapplied before the service is reopened. The backups are then deleted or overwritten on schedule.

8. User Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data. Contact us to submit a request.

9. Contact

For privacy requests, support, or account deletion, email [email protected] or call +1 260 308 6515.