Privacy Policy — MedScriptAI

MedScriptAI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

1. Information We Collect

Account information: Your full name, email address, medical college, and MBBS year when you create an account.

Usage data: Your interactions with our AI modules, including questions asked, responses received, and learning progress.

Device information: Device identifiers for security purposes, limited to a maximum of 2 registered devices per account.

Payment information: Processed securely through Razorpay. We do not store your card or banking details on our servers.

2. How We Use Your Information

To provide and improve our AI learning services
To track your learning progress and usage
To process subscription payments and top-ups
To send important account and service notifications
To enforce our device and session security policies
To comply with legal obligations

3. Data Security

We use Supabase with Row Level Security (RLS) to ensure your data is encrypted and only accessible to you. Your learning data is scoped to your account and cannot be accessed by other users. We support device-based security with a maximum of 2 registered devices and 1 active session per account.

4. AI Data Processing

Your questions and uploaded images are sent to Google Gemini AI for processing. We use Gemini 2.0 Flash Lite for generating responses. Your data is processed in accordance with Google's AI privacy practices. We do not use your data to train AI models.

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account at any time, and we will remove your data within 30 days.

6. Your Rights

Access your personal data
Request correction of inaccurate data
Request deletion of your account and data
Export your learning data
Opt out of promotional communications

7. Third-Party Services

We use the following third-party services: Supabase (database and authentication), Google Gemini AI (AI processing), and Razorpay (payment processing). Each service has its own privacy policy.

8. Contact

For privacy concerns, contact us at privacy@medscriptai.com

Disclaimer: This privacy policy is subject to AI processing limitations. MedScriptAI does not store sensitive medical images beyond what is necessary for the image interpretation feature.