1. Who we are
MedXSmart ("we", "us", "our") operates the website and services at medxsmart-react.rakeeza.org (the "Service"). This Privacy Policy explains how we handle personal information when you use our platform, including health logs, medical calculators, and related features.
2. Information we collect
We collect only what is reasonably needed to provide the Service (minimum necessary):
- Account information: name, email address, optional phone number, optional address, and login credentials.
- Health and wellness data: information you choose to enter into health logs, trackers, reminders, medical history, and calculator inputs or results.
- Family profiles: names and health data for family members you add to your account.
- Usage data: pages visited, calculators used, favorites, and general interaction with the Service.
- Technical data: IP address, browser type, device information, and cookies required for security and session management.
- Communications: messages you send through contact forms, newsletter sign-ups, or support requests.
3. How we use your information
We use collected information to:
- Provide, maintain, and improve the Service.
- Store and display your health logs, calculator history, and profile preferences.
- Authenticate users, prevent fraud, and protect account security.
- Send service-related emails such as verification codes, reminders, and account notifications.
- Respond to contact requests and support inquiries.
- Comply with legal obligations and enforce our terms.
4. Health information
Health data you enter is stored to power features you request, such as tracking, reporting, and reminders. You control what you submit. Do not enter information you are not comfortable storing digitally. We treat health-related data as sensitive and apply reasonable administrative and technical safeguards (access controls, encryption of sensitive fields, audit logging of sensitive actions, and secure sessions). This Service is designed with healthcare privacy principles in mind; it is not a substitute for clinical systems operated by a covered entity unless we have a written Business Associate Agreement with you.
5. Sharing of information
We do not sell your personal information. We may share data only:
- With service providers that help us operate the platform (hosting, email, payment processing, security tools), under confidentiality obligations.
- When required by law, regulation, legal process, or to protect rights, safety, and security.
- With your consent or at your direction.
6. Third-party services
We may use third-party services such as Google reCAPTCHA, email delivery providers, payment processors, and analytics or hosting providers. Those services have their own privacy policies governing their use of data.
7. Cookies and similar technologies
We use cookies and similar technologies for essential functions such as keeping you signed in, remembering preferences, and protecting against abuse. You can control cookies through your browser settings, though some features may not work correctly if cookies are disabled.
8. Data retention
We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account from Profile settings, we erase or anonymize associated health data and account identifiers subject to legal retention requirements (for example, billing records).
9. Security
We implement reasonable technical and organizational measures to protect your information, including HTTPS, password hashing, role-based access, encryption of selected sensitive fields, API authorization, session controls, and audit logs for sensitive actions. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
10. Your rights
Depending on your location, you may have the right to:
- Access, correct, or update your personal information through your account settings.
- Export a machine-readable copy of your account and health data from Profile → Download my data.
- Delete your account and associated health data from Profile → Delete account.
- Withdraw consent where processing is based on consent.
- Object to or restrict certain processing, where applicable by law.
To exercise these rights, use your Profile settings or contact us using the details below. We may need to verify your identity before fulfilling a request.
11. Security incidents
If we become aware of a security incident that affects personal information, we will investigate promptly, take steps to contain and remediate the issue, and notify affected users and regulators when required by applicable law. Our internal incident response procedure guides detection, containment, notification, and post-incident review.
12. Children's privacy
The Service is not intended for children under 13 (or the minimum age required in your jurisdiction) without appropriate parental or guardian involvement. We do not knowingly collect personal information from children in violation of applicable law.
13. International users
If you access the Service from outside the country where our servers are located, your information may be transferred to and processed in jurisdictions that may have different data protection laws.
14. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. Continued use of the Service after updates constitutes acceptance of the revised policy.
15. Contact us
For privacy-related questions or requests, contact us at admin@medxsmart.com or visit Contact.