Last Updated: November 24, 2024
Krocess LLC ("we," "us," or "our") operates the MedMemoir mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
1.1 Personal Information
We collect information that you provide directly to us:
- Account Information: Email address, password (encrypted)
- Profile Information: Name, date of birth, blood type, sex, phone number, address, profile photo
- Medical Information: Health records, vital signs, medical documents, allergies, conditions, medications, disease history
- Emergency Contacts: Names and contact information of your emergency contacts
1.2 Health Data
MedMemoir is a medical records management application. We collect and store:
- Vital signs (blood pressure, heart rate, glucose levels, weight, temperature, etc.)
- Medical documents and photos
- Medication information and reminders
- Appointment information
1.3 Automatically Collected Information
- Device Information: Device type, operating system, unique device identifiers
- Usage Information: App features used, timestamps, interaction data
- Technical Data: IP address, app version, crash reports
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Store and manage your medical records securely
- Send email verification codes and notifications
- Process your subscription payments
- Respond to your support requests and feedback
- Comply with legal obligations
- Detect and prevent fraud or security issues
3. Data Storage and Security
3.1 Encryption
- All data is encrypted at rest using industry-standard encryption (AES-256)
- Data is stored locally on your device using secure storage (iOS Keychain/Android Keystore)
- Cloud backups (if enabled) are encrypted
3.2 HIPAA Compliance
We implement reasonable and appropriate safeguards designed to protect your health information, consistent with HIPAA requirements for mobile health applications.
4. Information Sharing and Disclosure
4.1 We DO NOT Sell Your Data
We will never sell, rent, or trade your personal or health information.
4.2 Service Providers
We may share information with third-party service providers who assist us:
- Firebase (Google): Cloud storage and authentication
- Apple/Google: In-app purchases and health data sync
- Email Service: For verification emails and support
5. Your Rights and Choices
You have the right to:
- Access all your data within the app
- Edit or delete your information at any time
- Export your medical records
- Delete your account and all associated data
- Control notification preferences
- Revoke health data permissions
6. Children's Privacy
MedMemoir is not intended for children under 13 years of age. We do not knowingly collect information from children under 13.
7. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information is collected
- Right to delete your personal information
- Right to opt-out of sale of personal information (we don't sell data)
- Right to non-discrimination for exercising your rights
8. International Users
MedMemoir is operated from the United States. If you are located outside the U.S., your information will be transferred to and processed in the United States.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy in the app and updating the "Last Updated" date.
10. Data Breach Notification
In the event of a data breach that affects your personal or health information, we will notify you within 72 hours via email and in-app notification.