Version us-1.0 · binding for accounts in the United States

MedCards Privacy Policy (United States) — version us-1.0

Draft for counsel review. This policy applies to accounts with the US home region; their data stays in the US region.

P-1 What we collect

P-1.1 Account data (e-mail, name you choose), study data (cards, reviews, settings), purchase records and, with your

consent, product analytics without card text.

P-2.1 To run the service, sync your devices, process payments (Stripe, Apple, Google) and keep the service secure.

P-2.2 AI features send only the text of the action you ask for to our AI processor, without identifiers; the

processor does not train on it.

P-3.1 Categories collected: identifiers, commercial information, internet activity in the app, and inferences about

your study progress. Sources: you and your devices. Purposes: P-2.

P-3.2 We do not sell or share personal information, as the CCPA defines "sell" and "share". We do not use

sensitive personal information to infer characteristics about you.

P-3.3 Your rights: to know, to delete, to correct, to opt out of sale or sharing (we do neither), to limit the use

of sensitive personal information, and not to face discrimination for using them. Ask in Settings › Account › Data

or at privacy@medcards.app. We verify the request against your signed-in account.

P-3.4 Retention: account data while the account exists, then deletion within 30 days, except records the law keeps.

P-4.1 MedCards is not for children under 16 and does not knowingly collect their data.