Privacy Policy

Information We Collect

We collect account information (email, name) when you register, device details for security, and usage analytics to improve the product.

How We Use Your Data

Your data is used to authenticate your account, deliver the MediHelp service, provide support, and send important updates. We never sell your data.

Health Data

MediHelp provides drug reference information. If you choose to use features that store health-related information (such as patient profiles, lab results, prescriptions or questions you send to AI tools), that information is saved to your account, encrypted in the on-device cache and protected on our servers. We process it only to provide the features you use and never sell it. See "Patient data you enter" below.

Data Security

Your data is stored securely with industry-standard encryption. We use Firebase Authentication for secure sign-in and follow best practices for data protection.

Third-Party Services

MediHelp uses Firebase (authentication and analytics), Google Play Services, and Apple App Store infrastructure. Each has its own privacy policy.

Cookies

We use essential cookies for authentication, theme preference, and language selection. No advertising cookies are used.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time through the support page.

Contact

Privacy questions can be sent through the support page.

Controller

The controller is "MediHelp App" (operator: Omar Mahmoud). General contact: info@medihelpapp.com. Support and privacy requests: support@medihelpapp.com. The postal address is given in our legal notice (Impressum) page. Legal notice (Impressum)

Legal bases (Art. 6 and 9 GDPR)

Providing your account and the service: Art. 6(1)(b). Security, fraud prevention and product analytics: Art. 6(1)(f), legitimate interests. Optional analytics/advertising identifiers and marketing e-mails: only with your consent, Art. 6(1)(a). Tax and accounting records: Art. 6(1)(c). Health-related content is processed under Art. 9(2)(h) where a healthcare professional processes patient data under professional secrecy; otherwise it is processed only with your explicit consent, Art. 9(2)(a).

Patient data you enter

Healthcare professionals who store patient profiles, lab results or prescriptions in MediHelp are responsible for having a lawful basis and, where required, the consent of their patients. MediHelp processes this data on their behalf: it is stored encrypted in the on-device cache and protected on our servers, and it is sent to an AI provider only when the professional uses an AI feature. We recommend not entering direct identifiers (such as full names or ID numbers) into AI tools.

Processors and recipients

We use the following service providers, bound by data-processing agreements:

• OpenAI: AI features; only the text and images you submit to AI tools.
• Google / Firebase: authentication, push notifications, analytics and Crashlytics crash reports.
• Google AdMob: advertising in the free mobile app, with consent where required via Google's consent message.
• DigitalOcean: hosting, database and file storage in Frankfurt, Germany.
• Brevo: transactional e-mail.
• Regional payment providers, where offered: they receive only the data needed to process your payment.
• RevenueCat, Apple App Store and Google Play: in-app purchases and subscription status.
• Cloudflare Turnstile: bot protection on sign-in.
• Sentry: error monitoring (EU/Germany region); no personal data is sent by default.

International transfers

Some providers process data outside the EU/EEA, in particular in the United States. Transfers rely on the EU–US Data Privacy Framework where the recipient is certified, otherwise on the European Commission's Standard Contractual Clauses.

Retention

Account data is kept while your account is active. After you request deletion, your account is deactivated immediately and erased or anonymised after 30 days. Encrypted backups roll off within about 6 weeks. Payment and tax records are kept as long as the law requires.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent you may withdraw it at any time with effect for the future (Art. 7(3)). You can delete your account in the app and download your data in the app or on the web ("Download my data"). You can also contact us at support@medihelpapp.com.

Right to lodge a complaint

You may complain to a data-protection supervisory authority, in particular in the EU member state of your residence or place of work (Art. 77 GDPR).

Children

MediHelp is not directed to children under 16, and we do not knowingly collect their data.

Automated decisions

We do not make decisions producing legal or similarly significant effects based solely on automated processing (Art. 22). AI output is informational and must be verified by a professional.