Medical Disclaimer & Safety Warning
MedScan AI is an educational and informational tool powered by artificial intelligence. It does NOT provide formal medical advice, diagnosis, or professional treatment recommendations. Always consult a licensed physician, pharmacist, or certified healthcare provider regarding any health condition, symptoms, or medications. Never disregard professional medical advice or delay seeking treatment because of information received through this application. In case of a medical emergency, immediately contact your local emergency medical services.
AI Accuracy & Information Scope
While MedScan AI strives to offer reliable details regarding active ingredients, common uses, and safety precautions, AI outputs may occasionally contain discrepancies. Users are advised to cross-check medication labels, package inserts, and doctor prescriptions before consumption.
Data Privacy & Health Records
We respect your privacy and confidentiality. Medicine photos and health questions are sent to external AI services to provide the analysis or answers you request. Your account information and saved history are stored in Lovable Cloud, with account-scoped access controls. MedScan AI does not sell your health records or share them with other users. This app does not provide end-to-end encryption: the services processing your requests need access to their contents. The original medicine photo is not saved in the app database. You can permanently delete your account and its saved records from Settings, or request deletion by email. See our Privacy Policy for processors, retention and your choices.
User Consent
By registering, scanning medications, or using the MedScan AI assistant, you acknowledge that you have read, understood, and agreed to these Terms of Service and Privacy Policy.
Before first use of health features, you must also explicitly accept the medical safety disclaimer. Account settings remain available without accepting medical use.
Who we are
MedScan AI provides educational medicine information, health chat, and medicine reminders. For privacy questions or deletion requests, contact tkservices96@gmail.com.
Information we collect and why
- Account information: email address, profile name, account ID, and optional Google profile photo. Email/password sign-in uses the authentication service; Google sign-in supplies account metadata. This identifies your account and protects access to your records.
- Camera photos: when you choose Analyze, your medicine photo is sent for AI identification and explanation. A preview is held temporarily in the app; the app does not save the original photo in its database or upload it to a photo-storage bucket.
- Medicine records: identified medicine names, ingredients, uses, precautions, explanations, and scan dates are saved for private history. Saved analysis text is sent to AI when you request a translation.
- Health chat: questions, AI replies, thread titles, and dates are saved so you can reopen conversations. Conversation context is sent to the chat AI to produce relevant replies.
- Reminders: medicine names, dose notes, reminder times, enabled status, and taken dates support your medicine routine.
- Android notifications: device push tokens, platform, and registration dates associate an Android device with your account for notification delivery. Permissions can be managed in Android Settings. Token registration does not guarantee automatic remote reminder delivery.
- Safety records: first-use disclaimer acceptance date, AI-access status, and submitted content reports (account ID, reported content, reason, source, and date) support medical safety and content review.
- Abuse protection: account-scoped AI usage counts and recent request times enforce usage limits. Hashed email/IP subjects, attempt counts and lockout times protect account forms; these hashes are pseudonymous, not anonymous.
Who processes information
Lovable Cloud uses Supabase for authentication and database storage. This is where the account and saved records listed above are held; there is currently no app photo-storage bucket. Google processes Google sign-in. Gemini, provided by Google through the Lovable AI Gateway, processes medicine photos, analysis and translations. Groq processes health-chat questions and conversation context. Firebase Cloud Messaging, provided by Google, processes Android push registration tokens and notification delivery information when notifications are used. These services may also process technical connection information such as IP addresses and service logs under their own policies.
MedScan AI does not sell your health records or publish them to other users. Your saved records are account-scoped. Avoid including personal identifiers or unnecessary sensitive information in photos or chat. Provider processing may occur outside your country.
Retention
There is no automatic expiry configured for account records. Saved scans, chats, reminders, push tokens, profile information, safety acceptance and reports remain until they are deleted or the account is deleted. Chat threads can be deleted from chat history. Removing an account permanently removes its live application records and sign-in account. Camera previews are temporary and the app does not keep the original image as a saved record.
AI providers and infrastructure services may retain their own operational logs or backups under their policies. This app does not configure or establish a fixed retention period for those copies, and account deletion cannot recall information already processed by an AI provider. Contact us for help with provider-related deletion questions; we do not promise an unverified backup-erasure deadline.
Protection records and processors
Account-linked AI usage counters and reviewer grants are removed when the account is deleted. Hashed email/IP authentication counters are not linked to the account by a deletion relationship and may remain after account deletion; their enforcement windows expire, but no automatic row-erasure schedule is configured. Infrastructure providers may retain their own security records under their policies. Firebase is used for messaging, not as this app's health-record or photo storage.
Your choices and deletion
Open your account avatar, choose Settings, then Delete my account and confirm. This deletes your authentication account, scans, chat threads and messages, reminders, push tokens, profile, AI usage counts, reviewer grants, AI-access records, reports and disclaimer acceptance. You can also request deletion from your account email at tkservices96@gmail.com; we may verify account ownership before acting. See Account deletion for instructions. Revoke camera or notification permissions through device settings at any time.
Security and local preferences
AI requests require sign-in and are processed on the server; private API keys are not stored in the browser. Access controls restrict saved health records to their owner. The app stores a sign-in session, your light/dark preference and notification-onboarding state locally, plus a per-session splash flag. Medicine language preference and translation caches remain in app memory. No system can guarantee absolute security.
Updates and contact
This policy may be updated when actual processing changes. The effective date appears above. Send privacy, access, correction or deletion questions to tkservices96@gmail.com.