Privacy Policy

We collect only what is necessary to provide the Service. This includes:

• Health information you voluntarily provide — symptom descriptions you type into the symptom checker, or medical documents you upload (e.g., lab results, doctor's notes, specialist reports). This information is sent to OpenAI for analysis and is not stored permanently on our servers beyond what is needed to display your results.
• Account information — if you choose to create a free account, we collect your email address and name via our authentication provider (Clerk). This allows you to save your health history and access it across sessions.
• Health history records — if you are signed in, completed analyses are saved to your account so you can review them later. These records are linked to your user ID, not your email address, in our database.
• Usage data — pages visited, browser type, device type, approximate location (city level), and referring URLs. This data is collected automatically via Google Analytics and is used only to improve the Service.
• Cookies and local storage — used to remember your theme preference (light/dark mode) and your cookie consent choice.

We do not collect your full name, phone number, health card number, provincial health ID, or any payment information (MediGuide is entirely free).

We use the information we collect strictly to:

• Provide AI-powered health information, specialist recommendations, and document analysis.
• Save your health history to your account if you are signed in.
• Improve the accuracy, relevance, and safety of our Service.
• Analyse aggregate, anonymised site traffic via Google Analytics.
• Respond to your messages if you contact us.
• Comply with applicable Canadian and international legal obligations.

We do not use your health information for advertising targeting. Your symptom descriptions and uploaded documents are used only to generate your analysis result and are never used to serve you ads.

We do not sell your personal or health information. We share limited data with the following third-party service providers solely to operate the Service:

We may also disclose information to legal authorities when required by law, court order, or to protect the safety, rights, or property of MediGuide and its users.

We use cookies and similar technologies to enhance your experience and operate the Service. You can control cookie preferences through our cookie banner or your browser settings.

Types of cookies we use:

• Essential cookies: Required for the Service to function correctly. These include your theme preference (light/dark mode) and your cookie consent status. These cannot be disabled without affecting Service functionality.
• Authentication cookies: Set by Clerk to keep you signed in to your account across sessions. Only present if you create an account.
• Analytics cookies: Set by Google Analytics to help us understand how visitors interact with the Service on an anonymous, aggregate basis. No personally identifiable information is collected.

You may learn more about personalised advertising choices in general at AboutAds.info.

We retain data for as long as necessary to provide the Service:

• Uploaded documents: Document content is sent to OpenAI for analysis and is not stored permanently on our servers. It exists in memory only long enough to return your result. Once the analysis is complete, the raw document content is discarded.
• Analysis records: If you are signed in, a structured summary of your analysis (possible conditions, urgency, specialist recommendation) is stored in your account history indefinitely until you delete it or close your account.
• Guest analysis records: If you use MediGuide without signing in, your results are stored temporarily to display your results page, but are not linked to any user account and are not accessible after your session ends.
• Account data: Your account information is retained until you request account deletion.
• Analytics data: Aggregate usage data is retained by Google Analytics for 26 months by default.

To request deletion of your account and all associated data, contact us at rmohan616@gmail.com. We will action all deletion requests within 30 days.

We take the security of your information seriously. MediGuide employs the following safeguards:

• HTTPS / TLS encryption: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). You can verify this by the padlock icon in your browser's address bar.
• Database access controls: Our database is not publicly accessible. Access is restricted to the application server using private network rules.
• Authentication security: Account authentication is handled by Clerk, which provides industry-standard security including bcrypt password hashing, brute-force protection, and multi-factor authentication options.
• No plaintext health data storage: Raw document content (PDFs, images) is never written to our database. Only the structured analysis result is stored.
• OpenAI API communication: Symptom and document data is transmitted to OpenAI over encrypted channels. We do not opt in to OpenAI's data training programmes; your data is used only for inference.

No system is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security of data transmitted over the Internet. If you believe your account has been compromised, contact us immediately at rmohan616@gmail.com.

As a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law. These rights include:

• Right to access: You may request a copy of the personal information we hold about you. We will respond within 30 days.
• Right to correction: You may request that inaccurate personal information be corrected. Account information can be updated directly in your account settings.
• Right to withdrawal of consent: You may withdraw your consent for the collection or use of your personal information at any time, subject to legal or contractual restrictions. Withdrawing consent may affect your ability to use certain features of the Service.
• Right to deletion: You may request that we delete your personal information. We will action all deletion requests within 30 days.
• Right to complain: You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not complied with PIPEDA.

To exercise any of these rights, contact us at rmohan616@gmail.com. Please include "Privacy Request" in the subject line.

MediGuide is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at rmohan616@gmail.com and we will take steps to remove that information promptly.

Users aged 13–17 should use MediGuide only with the knowledge and consent of a parent or guardian.

We may update this Privacy Policy from time to time as the Service evolves or applicable law changes. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Post a notice on the MediGuide website for a period following the change.

Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy. If you do not agree with a material change, please stop using the Service and contact us to request deletion of your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or MediGuide's privacy practices, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.