Privacy Policy

This Privacy Policy explains how the Medical Data mobile application (the "App"), developed by Ali Uzunoğlu ("we", "us" or "the developer"), collects, uses and protects information. By using the App you agree to the practices described here.

1. Who the App is for

The App is intended for physicians and healthcare researchers who collect patient data for academic studies. It is not intended for patients or for anyone under 18.

2. Information we collect

Account information

• Name (display name) and email address, used to create and sign in to your account with Firebase Authentication.
• An optional profile photo.
• A unique user ID assigned by Firebase.

Study data you enter (user content)

• Diseases (studies) you create and the parameters you define for them.
• Patient records and the values you enter for each parameter.
• Sharing settings, including which colleagues can access a study and with what permissions.

Patient records can include health information. You are responsible for what you enter. Before entering patient data, make sure you have the necessary patient consent and ethics committee approvals, and that you comply with the laws that apply to you (such as Türkiye's KVKK, the EU GDPR or the US HIPAA). We strongly recommend not entering directly identifying details such as full names, national ID numbers, phone numbers or addresses. Use study codes instead.

Purchase information

Subscriptions are processed by Apple through the App Store. We receive confirmation of your subscription status and purchase history, but we never receive your card number or other payment details.

Device and usage information

• A push notification token, used to notify you about sharing requests and permission changes.
• Usage data, such as screens viewed and features used, collected through Firebase Analytics.
• Diagnostics, such as crash logs, performance data, device model and operating system version, collected through Firebase Crashlytics and Firebase Performance Monitoring.
• IP address and approximate (coarse) location derived from it, as processed by these services.

3. How we use information

• To create your account and sign you in.
• To store, sync and back up your studies and patient records across your devices.
• To let you share studies with colleagues and manage their permissions.
• To let colleagues find you by name or email when they want to share a study with you, if you allow it.
• To export your data as .csv / Excel files when you ask for it.
• To manage your subscription and free-tier limits.
• To send notifications that relate to your account and shared studies.
• To fix bugs, monitor performance and improve the App.
• To reply to your support requests.

We do not sell personal information or patient data. We do not use patient data or study content for advertising or marketing, and we do not access the content of your studies except when you ask for support, when it is needed to keep the service secure, or when the law requires it.

4. Sharing

With colleagues you choose

When you share a study, the colleagues you invite can see its parameters and patient records with the permissions you set. You can change or revoke these permissions at any time. Your name, email address and profile photo are shown to people who search for you or share with you.

With service providers

These providers process data on our behalf, only to provide their services. We may also disclose information if the law requires it, or to protect the rights and safety of users and others.

5. International transfers

Google, Algolia and Apple may store and process data on servers outside your country, including in the United States and the European Union. Where required, these transfers are covered by the safeguards the providers offer, such as Standard Contractual Clauses. By using the App, you acknowledge that your data may be transferred in this way.

6. Data retention and deletion

• Your account and study data are kept for as long as your account is active.
• You can delete diseases (studies) and patient records in the App at any time.
• To delete your account and all related data, email us from your registered address at the contact below. We will delete your account, studies, patient records and profile photo within 30 days, except where the law requires us to keep something longer. Copies already exported or shared with colleagues remain under their control.
• Accounts whose email address is never verified are deleted automatically.
• Analytics and crash data are kept according to Google's retention settings and then deleted automatically.

7. Security

Data is sent over encrypted connections (HTTPS/TLS) and stored on Google Cloud infrastructure, which encrypts data at rest. Access to study data is controlled by your account and the sharing permissions you set. No method of transmission or storage is 100% secure, so please protect your device and password, and avoid entering directly identifying patient information.

8. Your rights

Depending on where you live, including under Türkiye's KVKK (Law No. 6698) and the EU GDPR, you may have the right to:

• find out whether we process your personal data and get a copy of it;
• correct inaccurate data (you can edit your profile in the App);
• request deletion of your data;
• object to or restrict certain processing;
• receive your data in a portable format (you can also export study data as .csv);
• lodge a complaint with your data protection authority.

To exercise these rights, contact us at the address below. If a patient contacts us about data a physician entered, we will forward the request to that physician, who controls that data.

9. Children's privacy

The App is not directed to children, and we do not knowingly collect personal information from anyone under 18 as App users. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new effective date. If the changes are significant, we will also notify you in the App.

11. Contact

If you have any questions about this Privacy Policy or your data, contact us at help-medicaldata@aliuzunoglu.com.