MediPass Privacy Policy

Introduction

MediPass ("we," "our," "us") is committed to safeguarding the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our website, mobile application, and personal health record services (collectively, the "Services"). By using our Services, you agree to this Policy and our Terms of Use.

Information We Collect

When you create a new account, we may collect:

• Account information (name, email, phone number, login credentials).
• Health information (medical records you upload, records retrieved from connected providers, lab results, vaccination records, clinical notes).
• Payment information (if you subscribe to premium features).
• Device and usage information (IP address, browser type, app activity, cookies).

How We Use Your Information

We use your information to:

• Provide and improve our Services.
• Summarize and organize your medical records.
• Respond to inquiries and customer support requests.
• Send service notifications and account updates.
• Ensure compliance with legal and regulatory obligations.
• Conduct aggregated, de-identified research to improve features.

We do not sell your data or use it for advertising without your consent. Every way we use your data is to provide you with better service.

Sharing of Information

We may share your information with:

• Third-party service providers that perform services on our behalf (e.g., web-hosting, storage, analytics, payment processors, mailing vendors) under confidentiality agreements.
• Healthcare providers, as directed by you or with your consent.
• Regulators or law enforcement, when legally required.
• A buyer or other successor in the event of a merger, acquisition, or sale of assets.

We never sell personal health data.

Your Rights

You have rights to:

• Access and download your personal data from the website.
• Correct inaccuracies using the editing tool from the website.
• Delete your account from your MediPass profile settings.
• Withdraw consent where applicable.

Data Security

We use technical and administrative safeguards that are designed to improve the confidentiality, integrity and accessibility of your Personal Information. We incorporate secure storage and transmission technologies including encryption, access control and audit. We cannot, however, ensure or warrant the security of any information you transmit to us via the Service, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our technical, physical, or administrative safeguards.

Data Breach Notification

As explained above, MediPass cannot guarantee that your personal information may not be accessed, disclosed, altered, or destroyed by breach. In the event of unauthorized access or disclosure of your personal information, we will send notification via the e-mail address associated with your MediPass account.

Data Retention

We will retain your Personal Information for as long as is reasonably necessary to fulfill the relevant purposes set out in this Policy and during the period required or permitted by law. The retention period will primarily be determined by relevant legal and regulatory obligations and/or duration of our business relationship with you. We will securely delete or de-identify your Personal Information if there is no valid business reason for retaining your data.

International Data Transfers

If you access MediPass outside the United States, your information may be transferred to and processed in the U.S. and other jurisdictions where our service providers operate. We ensure that appropriate safeguards are in place for any international transfers.

Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we will notify you via email or through the Services. Continued use after changes constitutes acceptance.