Privacy Policy

Last updated: 17 October 2026 · Operator: EasyLocum Solutions LLP · Domain: medoease.com

1. Who we are

MedoEase is a healthcare application owned and operated by EasyLocum Solutions LLP, an Indian limited liability partnership. We are reachable at [email protected]. This policy applies to the website medoease.com, the MedoEase mobile and web apps, and the MedoEase All-in-Tap Health Card service.

2. What MedoEase does

MedoEase lets patients securely record their medical history, book appointments with doctors and clinics, manage consultation queues, share records via QR or our All-in-Tap Health Card, access teleconsultations, and surface critical emergency information to first responders. Doctors and clinic staff use MedoEase to review patient histories (only with the patient's explicit consent), manage appointment queues, and coordinate care.

3. Information we collect

• Account information: name, email address, mobile number, date of birth, gender — to create and secure your account.
• Health information you choose to enter: medical history, prescriptions, lab reports, allergies, vitals, family history. You decide what to enter and which doctors or clinics to share it with.
• Appointment and usage data: bookings, queue position, consultation summaries, device and log data needed to operate the service securely.
• Payment information (only if you order a Health Card or paid plan) is processed by our PCI-DSS compliant payment partners; we do not store full card numbers.

Information from partners (MedoEase Partner app)

The MedoEase Partner app is used by doctors, clinics, pharmacies and fitness and wellness coaches; the partner portal on the web is also used by insurance partners and organisations. If you use either, we collect:

• Account and profile: name, email, phone, professional details (registration or licence number, qualifications, specialisation), and clinic or business details.
• Documents and photos: files you upload, such as your medical registration, qualification documents, government ID, profile photo and clinic or business logo, using the camera or your photos.
• Consultation audio: recordings you choose to make of a consultation, and their transcripts. The audio is uploaded to MedoEase, stored encrypted on our storage provider (DigitalOcean Spaces, Bangalore region), and sent to Groq (a speech-to-text service acting on our behalf) to be transcribed. The recording and transcript are kept until the doctor deletes them, or the patient’s account is deleted.
• Voice typing uses your phone’s own speech recogniser (provided by your phone’s operating system); MedoEase receives only the text.
• Location: only when you tap “use my current location” while setting up or editing your practice or clinic address. The coordinates are sent to MedoEase and looked up with OpenStreetMap Nominatim to fill in the address. Location is used only while the app is open, never in the background.
• Payout details: bank account, IFSC, beneficiary name and business details, used only to pay you and shared with Razorpay, our payment processor, to set up your payout account.
• AI plan drafts for coaches: when a coach asks for a draft workout or diet plan, we send an AI model (GLM, from Z.ai) a de-identified summary of the client: age band, sex, body measures, activity averages and the coach’s intake notes, plus conditions, allergies, medicine names and lifestyle only if the client chose to share their medical history with that coach. It never receives the client’s name, phone, email, ID or date of birth.

Patient and client data: partners see only what a patient or client has shared with them, such as through a consultation they booked or a coaching link they accepted. Partners must use it only to provide care or coaching to that person.

Closing a partner account: open Delete account in the MedoEase Partner app or partner portal (or email [email protected] from your registered email address). We close it within 30 days; records you wrote for patients are kept, locked, for as long as the law requires. See also medoease.com/delete-account.

4. Google account data (Sign in with Google)

If you choose to sign in using your Google account, MedoEase requests only the basic profile scopes: your name, email address, and profile picture. We use this information solely to identify your MedoEase account, populate your profile, and send service emails. MedoEase does not read, write, modify, store, or share any other Google data — including Gmail, Drive, Calendar, Contacts, or Photos. You can revoke MedoEase's access at any time from your Google Account permissions page.

5. Health and fitness data (Apple Health and Health Connect)

In the MedoEase app on iPhone or Android you can choose to connect Apple Health (iOS) or Health Connect (Android). This is optional; MedoEase works fully without it.

• What we read — only the types you allow: steps, walking/running distance, active and total calories burned, calories burned at rest (basal metabolic rate) and exercise minutes; daily average, minimum and maximum heart rate and resting heart rate; time asleep (and sleep stages, if available); weight, blood pressure and blood oxygen (SpO₂).
• We read up to the last 30 days when you connect, then new data each time you open the app. We never write to or change your Apple Health or Health Connect data.
• Background sync (Android, optional): only if you turn on Auto-sync in background on the Activity page, MedoEase reads today’s and yesterday’s activity from Health Connect about every 30 minutes while the app is closed, so your steps and widgets stay current. Turn the switch off and background reading stops.
• Walkathons (optional): while you take part in a walkathon you joined, we read your walks, runs and hikes from Health Connect — including the GPS route recorded by your watch, if you allow routes — and the steps and heart rate during them, to count your distance and check it was walked, not faked. Routes are used only for that walkathon: other participants never see them, and the walkathon’s organisers see them only if they review your entry.
• Walkathon location checks (optional): if you turn on location checks for a walkathon, the app may take your location once a minute for up to 5 minutes at random moments during the event, even when the app is closed, to confirm you are really walking. A notification shows while this runs. It stops when the walkathon ends or when you turn checks off.
• Step and activity counts use only data recorded by your phone or wearable; steps typed in by hand are ignored. Weight, blood pressure, heart rate, sleep and SpO₂ include values you entered yourself, marked “Self-entered”. We store daily summaries, not every individual reading.
• Water intake: the glasses of water you log in MedoEase (and water reminders you mark as taken), together with your water goal and glass size. If you use the smart goal, it is worked out from your latest weight and that day’s activity.
• How we use it: only to show you your trends, and to show them to a doctor you are consulting through MedoEase if you choose to share “Activity & Vitals” for that consultation. Doctors you haven’t consulted can’t see it.
• Groups and family leaderboards: if you join a MedoEase group, your step and calorie totals and your name (or the display name you choose) are shown to that group’s members. With the consent you give when joining, the group’s admins can also see your daily steps, active calories, distance and exercise — never your heart rate, sleep, blood pressure or other vitals. Your accepted family connections see your step totals on the family leaderboard. A water-goal badge and your water streak are shown on boards only if you turn on “Show my water goal on boards”; your water amounts are never shown. You can hide yourself from a board, stop sharing with admins, or leave a group at any time.
• We never sell it; use it for advertising, marketing or profiling; share it with advertisers, data brokers or analytics services; share it with insurers, employers or other partners (other than what you choose to show a group you join, such as a company group's leaderboard and admins); or use it to decide eligibility for credit, insurance or employment.
• Health Connect (Android): The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.
• Apple Health (iOS): Data from Apple Health is used only as described above and is never used for advertising, disclosed to third parties for advertising or data-mining purposes, or stored in iCloud.
• Your controls: choose which data types to share when you connect (and change them any time in Apple Health or Health Connect settings); disconnect any time in the app under Activity & Vitals → Disconnect and choose to delete the data already imported; or email [email protected] to have it deleted.

6. Why we collect this data

We collect data only for purposes you would reasonably expect from a healthcare app: to authenticate you, to let you and your chosen doctors view your medical history, to deliver appointments and teleconsults, to ship and activate the All-in-Tap Health Card, to comply with legal obligations, and to keep the service safe from fraud and abuse. We do not sell personal data, and we do not use your health data for advertising.

7. How we share data

Health information is shared only with the doctors, clinics, or family members you explicitly authorise — every share requires your active consent (a tap, a QR scan you initiate, or an in-app approval). We share data with infrastructure providers (e.g., DigitalOcean for hosting, Resend for email, Razorpay for payments, Delhivery for shipping the Health Card; for partners also Google for Google Meet links on a doctor’s or coach’s own Google Calendar and Firebase Cloud Messaging for notifications, Groq for transcribing consultation recordings, OpenStreetMap Nominatim for address lookup, and Z.ai for de-identified AI plan drafts for coaches) under data-processing agreements and only to the extent needed to deliver the service. We may disclose information when legally required by Indian law.

Crash and error reports. When the app or website hits an error, we send a crash report to Sentry (an error-monitoring service acting on our behalf, hosted in the EU) so we can fix it. A report contains technical details such as the error, the screen, the browser or device and app version, and your MedoEase user ID. It never contains your name, email, phone number, health records or what you typed. Crash reports are kept for up to 90 days.

Usage analytics. To find and fix confusing screens, we use PostHog (a product-analytics service acting on our behalf) to record which screens you open and what you tap, linked to your MedoEase user ID. On sign-up, plan, payment and booking screens we may also record a screen replay of a sample of sessions. Replays hide all text, everything you type, and all photos before they leave your device. We never record health records, prescriptions, chats or messages, and we never send PostHog your name, email, phone number or health data. Analytics data is kept for up to 2 years. You can turn this off at any time in Profile → Privacy → Share usage analytics.

8. How we protect data

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is role-based and audit-logged. We follow industry-standard practices aligned with India's DPDP Act 2023 and HIPAA security principles. Despite our efforts, no internet service can be guaranteed 100% secure.

9. Your rights

• Access and download your data from the in-app Settings → My Data screen.
• Correct or update any information at any time.
• Revoke a doctor's or clinic's access to your records.
• Stop MedoEase reading Apple Health or Health Connect, and delete the data already imported, from Activity & Vitals → Disconnect.
• Delete your account — in the app under Profile → Delete account, or without the app at medoease.com/delete-account. Doctors and clinics lose access to your records at once, your account is locked, and your data is erased 30 days after your request (you can cancel by signing in before then). Records your doctors wrote are kept locked — no one, including the doctor, can open them in MedoEase — and deleted 3 years after the last one, as Indian medical-record rules require. Invoices are kept for tax law. You can also email [email protected].

10. Data retention

We keep your data while your account is active. After deletion we retain only the minimum needed to comply with legal, tax and regulatory obligations (typically up to 7 years for transaction records). Apple Health and Health Connect data is kept until you disconnect and choose to delete it, or ask us to delete it. When you delete your account, the data you added is erased 30 days after your request; records your doctors wrote are locked and deleted after 3 years; invoices are kept for as long as tax law requires.

If you report content or a person in the community, we keep the report and the reported content to moderate the community. The person you report is never told who reported them. If you block someone, we keep that block until you remove it or delete your account.

11. Children

MedoEase is not directed at children under 13. Minors must use the service through a parent or guardian's account.

12. International transfers

Our primary infrastructure is in India. Some sub-processors (e.g., email delivery and crash reporting) may process data outside India under appropriate contractual safeguards.

13. Changes to this policy

If we change this policy materially we will notify you in-app or by email. The "Last updated" date at the top of this page always reflects the current version.

14. Contact

Questions, concerns, data requests: [email protected]. Postal: EasyLocum Solutions LLP, India.