Privacy Policy

MedChart processes account data (email, profile details), health-related data (laboratory reports, parameters, optional medical background), and technical data (app version, platform, logs) to operate requested features. If you sign in with Apple or Google, we receive the name and email address that the service shares with us.

The website records page path, locale, referrer, campaign parameters, and country derived from IP; the IP itself is not stored. On a successful sign-in, MedChart also stores the account identifier, platform, sign-in method, account language, the remember-me choice, and country derived from IP; the IP itself is not stored, and page views are not linked to the account.

To provide the service, we use third-party providers: DeepSeek (China) for recognizing and interpreting reports, AI analyses, and the AI chat; Yandex Cloud (Russia) for recognizing text in uploaded images; as well as providers for secure file storage on servers in Russia, email delivery, and technical infrastructure. Each provider receives only the data needed for its task, uses it only to provide the service to MedChart, and is required to protect it at a level no lower than described in this policy.

To recognize and interpret uploaded reports, prepare AI analyses, and answer questions in the AI chat, MedChart sends data to DeepSeek, an artificial intelligence provider located in China. Before the first transfer, the app names the provider, explains what is sent, and asks for your permission. The data sent includes:

• the text of uploaded documents, which may include personal details printed on them, such as your name, date of birth, and insurance policy number
• laboratory parameters and their values, examination findings and conclusions
• the questions you type in the AI chat
• health profile details you added that help interpret results: age, sex, height, weight, blood group, previous diseases, allergies, current medication, and additional notes

This is a cross-border transfer of personal data to China, where the legal protection of personal data may differ from that in Russia. Your email address and password are not sent to DeepSeek. If you do not give permission, AI features stay off and no data is sent to DeepSeek. You can withdraw your consent by contacting privacy@med-chart.com or by deleting your account.

By giving consent in the app, you allow processing of laboratory results, health indicators, and other health-related information that you provide for organizing, storing, trend analysis, and informational explanations in the app, including the transfer to the providers listed above for the purposes described in this policy.

We protect health-related data using encryption at rest for sensitive fields, including:

• medical profile details
• examination findings and conclusions
• laboratory parameter values
• AI chat and analysis content

Data is retained while your account is active. After account deletion, we may retain a limited deletion record containing the account identifier, email address, name, deletion date, and optional deletion reason for security, fraud-prevention, and support purposes. Health-related data is deleted. You can request account deletion in-app. You may also review the Delete Account page or contact support@med-chart.com.

MedChart does not sell personal data. We share data only with the providers listed in this policy and only for the purposes described here.

MedChart accounts require users to be at least 18 years old. Medical data of a child or minor family member may be processed in MedChart only with consent of a parent or legal guardian, for trend tracking and informational explanations in the app.

We may update this policy from time to time. Material updates will be reflected on this page with an updated effective date where appropriate.

For privacy-related questions, contact privacy@med-chart.com.