Privacy Policy

Last updated: 28 September 2026 · Operator: EasyLocum Solutions LLP · Domain: medoease.com

1. Who we are

MedoEase is a healthcare application owned and operated by EasyLocum Solutions LLP, an Indian limited liability partnership. We are reachable at [email protected]. This policy applies to the website medoease.com, the MedoEase mobile and web apps, and the MedoEase All-in-Tap Health Card service.

2. What MedoEase does

MedoEase lets patients securely record their medical history, book appointments with doctors and clinics, manage consultation queues, share records via QR or our All-in-Tap Health Card, access teleconsultations, and surface critical emergency information to first responders. Doctors and clinic staff use MedoEase to review patient histories (only with the patient's explicit consent), manage appointment queues, and coordinate care.

3. Information we collect

• Account information: name, email address, mobile number, date of birth, gender — to create and secure your account.
• Health information you choose to enter: medical history, prescriptions, lab reports, allergies, vitals, family history. You decide what to enter and which doctors or clinics to share it with.
• Appointment and usage data: bookings, queue position, consultation summaries, device and log data needed to operate the service securely.
• Payment information (only if you order a Health Card or paid plan) is processed by our PCI-DSS compliant payment partners; we do not store full card numbers.

4. Google account data (Sign in with Google)

If you choose to sign in using your Google account, MedoEase requests only the basic profile scopes: your name, email address, and profile picture. We use this information solely to identify your MedoEase account, populate your profile, and send service emails. MedoEase does not read, write, modify, store, or share any other Google data — including Gmail, Drive, Calendar, Contacts, or Photos. You can revoke MedoEase's access at any time from your Google Account permissions page.

5. Health and fitness data (Apple Health and Health Connect)

In the MedoEase app on iPhone or Android you can choose to connect Apple Health (iOS) or Health Connect (Android). This is optional; MedoEase works fully without it.

• What we read — only the types you allow: steps, walking/running distance, active and total calories burned, calories burned at rest (basal metabolic rate) and exercise minutes; daily average, minimum and maximum heart rate and resting heart rate; time asleep (and sleep stages, if available); weight, blood pressure and blood oxygen (SpO₂).
• We read up to the last 30 days when you connect, then new data each time you open the app. We don’t read it in the background, and we never write to or change your Apple Health or Health Connect data.
• Step and activity counts use only data recorded by your phone or wearable; steps typed in by hand are ignored. Weight, blood pressure, heart rate, sleep and SpO₂ include values you entered yourself, marked “Self-entered”. We store daily summaries, not every individual reading.
• Water intake: the glasses of water you log in MedoEase (and water reminders you mark as taken), together with your water goal and glass size. If you use the smart goal, it is worked out from your latest weight and that day’s activity.
• How we use it: only to show you your trends, and to show them to a doctor you are consulting through MedoEase if you choose to share “Activity & Vitals” for that consultation. Doctors you haven’t consulted can’t see it.
• Groups and family leaderboards: if you join a MedoEase group, your step and calorie totals and your name (or the display name you choose) are shown to that group’s members. With the consent you give when joining, the group’s admins can also see your daily steps, active calories, distance and exercise — never your heart rate, sleep, blood pressure or other vitals. Your accepted family connections see your step totals on the family leaderboard. A water-goal badge and your water streak are shown on boards only if you turn on “Show my water goal on boards”; your water amounts are never shown. You can hide yourself from a board, stop sharing with admins, or leave a group at any time.
• We never sell it; use it for advertising, marketing or profiling; share it with advertisers, data brokers or analytics services; share it with insurers, employers or other partners (other than what you choose to show a group you join, such as a company group's leaderboard and admins); or use it to decide eligibility for credit, insurance or employment.
• Health Connect (Android): The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.
• Apple Health (iOS): Data from Apple Health is used only as described above and is never used for advertising, disclosed to third parties for advertising or data-mining purposes, or stored in iCloud.
• Your controls: choose which data types to share when you connect (and change them any time in Apple Health or Health Connect settings); disconnect any time in the app under Activity & Vitals → Disconnect and choose to delete the data already imported; or email [email protected] to have it deleted.

6. Why we collect this data

We collect data only for purposes you would reasonably expect from a healthcare app: to authenticate you, to let you and your chosen doctors view your medical history, to deliver appointments and teleconsults, to ship and activate the All-in-Tap Health Card, to comply with legal obligations, and to keep the service safe from fraud and abuse. We do not sell personal data, and we do not use your health data for advertising.

7. How we share data

Health information is shared only with the doctors, clinics, or family members you explicitly authorise — every share requires your active consent (a tap, a QR scan you initiate, or an in-app approval). We share data with infrastructure providers (e.g., DigitalOcean for hosting, Resend for email, Razorpay for payments, Delhivery for shipping the Health Card) under data-processing agreements and only to the extent needed to deliver the service. We may disclose information when legally required by Indian law.

8. How we protect data

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is role-based and audit-logged. We follow industry-standard practices aligned with India's DPDP Act 2023 and HIPAA security principles. Despite our efforts, no internet service can be guaranteed 100% secure.

9. Your rights

• Access and download your data from the in-app Settings → My Data screen.
• Correct or update any information at any time.
• Revoke a doctor's or clinic's access to your records.
• Stop MedoEase reading Apple Health or Health Connect, and delete the data already imported, from Activity & Vitals → Disconnect.
• Delete your account — in the app under Profile → Delete account, or without the app at medoease.com/delete-account. Doctors and clinics lose access to your records at once, your account is locked, and your data is erased 30 days after your request (you can cancel by signing in before then). Records your doctors wrote are kept locked — no one, including the doctor, can open them in MedoEase — and deleted 3 years after the last one, as Indian medical-record rules require. Invoices are kept for tax law. You can also email [email protected].

10. Data retention

We keep your data while your account is active. After deletion we retain only the minimum needed to comply with legal, tax and regulatory obligations (typically up to 7 years for transaction records). Apple Health and Health Connect data is kept until you disconnect and choose to delete it, or ask us to delete it. When you delete your account, the data you added is erased 30 days after your request; records your doctors wrote are locked and deleted after 3 years; invoices are kept for as long as tax law requires.

11. Children

MedoEase is not directed at children under 13. Minors must use the service through a parent or guardian's account.

12. International transfers

Our primary infrastructure is in India. Some sub-processors (e.g., email delivery) may process data outside India under appropriate contractual safeguards.

13. Changes to this policy

If we change this policy materially we will notify you in-app or by email. The "Last updated" date at the top of this page always reflects the current version.

14. Contact

Questions, concerns, data requests: [email protected]. Postal: EasyLocum Solutions LLP, India.