01 · What we collect
Medfolio collects only what it needs to run your account:
- To sign you in — your phone number
- For each profile you create (yourself or a family member) — name, and optionally date of birth, gender, relationship to you, email address, and an alternate phone number
- When you upload reports — the file itself, plus the values, units, dates and reference ranges we extract from it
- When you share records — the phone number or email of the recipient you choose, and a record of their access (browser, device and IP address) so you can see who opened your records and revoke access at any time
- To notify you — a push notification token, a device label, and your app version
- To keep the app working — crash reports and error diagnostics via Firebase Crashlytics (a Google service), and server request logs
02 · What we don't collect
Medfolio does not collect your location, contacts, calendar, microphone or audio, financial information, or advertising identifiers. The app contains no advertising or tracking SDKs, and we do not build advertising profiles.
03 · How we use it
Your reports are used to operate Medfolio for you — extraction, organization, trend charts, sharing. We never use your records to train AI or for any purpose other than operating your account. We also use access records and diagnostics to keep your account secure, investigate problems, and prevent abuse.
04 · How we share it
Only through share links you create, with recipients you choose. We do not share with insurers, labs, pharmacies, or advertisers. Service providers process data on our behalf under contract: Amazon Web Services (file storage), our SMS gateway (login codes), and Google Firebase (crash reporting).
05 · Your rights
06 · Cookies
The Medfolio website uses essential cookies for session and security, and Google Analytics 4 cookies to understand traffic and content engagement — only after you accept via the cookie banner. We do not use advertising or ad-personalization cookies. The Medfolio mobile app does not use web cookies or any third-party analytics — your in-app activity stays inside Medfolio.
07 · Children
Medfolio is for users 18+. Children's records are managed as profiles under a parent's account.
08 · Contact
09 · Updates
When this policy changes, we notify users in-app at least 14 days before the change takes effect. The full revision history is available on request.