Privacy & Security Policy
Last updated: March 2025 ยท Effective immediately
1. What MedAI Is
MedAI ("we," "us," or "our") is an AI-powered health information platform. MedAI is not a licensed medical provider, does not practice medicine, and does not provide medical advice or patient care. All outputs are for informational purposes only and must be discussed with a qualified healthcare professional.
2. Anonymous Usage โ No Account Required
By default, MedAI is completely anonymous. No personal information is required to start a consultation. When you use MedAI without creating an account:
- No account or personal information is collected or required
- Only minimal technical data is used for platform functionality (browser type, temporary session cookies)
- Health conversations are not linked to any identity
- Session data is disconnected immediately upon closing your browser
- We genuinely cannot identify you โ there is no way to trace sessions to individuals
- Age and gender shared during consultation are used only to personalize your assessment, never stored after the session ends
3. Information We Collect
For anonymous users, we collect only what is technically necessary to operate the platform:
- Session cookies: Temporary cookies to maintain your conversation, deleted when you close your browser
- Technical logs: Browser type, general geographic region (country-level), page views โ never linked to individuals and never used for tracking
- Health information you volunteer: Symptoms, age, gender if you share them โ processed only to generate your health guidance, never stored permanently for anonymous users
4. How We Use Your Information
Information you share during a health consultation is used exclusively to:
- Generate relevant health guidance and symptom analysis
- Ask appropriate clinical follow-up questions during your consultation
- Personalize your assessment based on stated age, gender, allergies, and medical history
- Improve our platform (using only anonymized, aggregated, non-identifiable data)
5. AI Processing & Third Parties
MedAI is powered by Claude, an AI system by Anthropic. Your consultation messages are processed via the Anthropic API to generate health guidance responses. Anthropic processes this data under its own privacy policy. MedAI does not use your health conversations to train or fine-tune any AI models.
We do not share your health information with any third-party advertisers, data brokers, or analytics companies.
6. Data Security
We implement industry-standard security measures:
- All data encrypted in transit using TLS 1.3
- Session data is never written to persistent storage for anonymous users
- Regular security audits and vulnerability assessments
- Minimal data collection by design โ we cannot lose what we do not store
- No health data transmitted to advertising or tracking platforms
7. Cookies & Tracking
We use only essential session cookies to maintain your consultation session. We do not use:
- Third-party advertising cookies
- Cross-site tracking cookies
- Persistent health data cookies
- Social media tracking pixels
You can disable cookies in your browser settings. This may affect platform functionality but will not compromise your privacy โ anonymous sessions already leave no trace.
8. Children's Privacy
MedAI is intended for users 18 years of age or older. We do not knowingly collect information from minors. If we discover usage by someone under 18, we immediately cease processing their data. Parents or guardians must consult a qualified pediatrician for children's health concerns.
9. Special Categories of Health Data
Certain categories of health information receive heightened protection โ including reproductive health, mental health conditions, substance use, HIV/AIDS status, and genetic information. For anonymous users, this protection is absolute: we have no way to store or identify such data. We will never transmit these categories via unsecured channels.
10. Emergency Situations
In situations where we reasonably believe there is an imminent threat to life or safety, we may take action consistent with applicable law. For anonymous users, however, we have no identifying information that could be disclosed even in such circumstances.
11. Your Rights
As an anonymous user, you have complete control: close your browser to end your session and clear all data instantly. If applicable law grants you additional rights (GDPR, CCPA, etc.), contact us:
- Right to Access: Request information about what data we hold
- Right to Deletion: Request deletion of any stored data
- Right to Portability: Receive your data in a machine-readable format
- Right to Object: Object to specific uses of your data
We will respond to requests within 30 days. Contact: privacy@medai.health
12. International Users
MedAI is operated from India. By using MedAI, you consent to your information being processed in India and potentially in other countries where our service providers operate. For EU/EEA users, we comply with GDPR requirements. For California residents, we comply with CCPA requirements.
13. Changes to This Policy
We will post any material changes on this page with an updated effective date. For significant changes, we will display a prominent notice on the platform. Continued use of MedAI after changes constitutes acceptance of the updated policy.
14. Contact Us
Email: privacy@medai.health
Support: support@medai.health
Response time: Within 30 days for privacy requests