MedMate Privacy Policy (Rawdestiny)

This policy is provided for transparency. It is not legal advice.

What MedMate Does

MedMate helps people organize medicine reminders, medicine photos, schedules, caregiver sharing, dose history, and widgets, with AI-assisted medicine entry (fill and scan). MedMate is not a doctor, pharmacist, clinic, poison control center, emergency service, or substitute for professional medical advice.

Information We Collect

We may collect:

Account and authentication information, such as Apple or Google sign-in identifiers, display name, and email when provided.
Medicine and routine information that the user chooses to enter directly, such as medicine names, dosage text, notes, schedules, dose history, refill fields, medicine photos, package/barcode text, and caregiver sharing state. This is the only source of health-related data in the app. It is treated as sensitive health data.
Prescription or package scan content, such as images, OCR text, and AI draft candidates, when the user chooses a scan/import feature.
AI-assisted medicine entry content, such as the medicine name or scan image, saved medicine context used to produce a fill draft, AI-generated draft fields, and validation metadata.
App usage and subscription information, such as subscription status, purchases, restored transactions, refunded/revoked transactions, and AI feature usage records.
Device and technical information, such as app version, diagnostics, APNs token, device identifiers needed for sign-in or sync, timezone, language, country/locale, and network request logs.

How We Use Information

We use information to:

Provide reminders, medicine lists, widgets, sync, caregiver sharing, and support.
Run subscriptions, Apple in-app purchases, restores, and refunds.
Provide AI-assisted medicine drafts, medicine scan fill, and prescription import, when the user chooses to use them.
Build and improve MedMate's internal medicine library/cache from reviewed, user-confirmed, or frequently seen data. AI-generated content does not become medical truth only because many users mention it.
Improve safety, reliability, abuse prevention, and fraud prevention.
Respond to support requests and comply with legal obligations.

Medicine and Health Data

Medicine and health-related information is treated as sensitive. MedMate does not sell medicine names, dosage details, dose history, or medical notes, and does not share them with third parties for marketing purposes.

User-Provided Health Data

MedMate no longer reads Apple Health or any system health store. The app does not request HealthKit permissions.

All health-related information in MedMate is information the user enters directly: medicine names, dosages, schedules, notes, dose history, photos, and caregiver sharing state. This information is treated as sensitive health data. We do not use it for advertising. We do not sell it. We do not share it with third parties except as described in this policy (providers operating the service, caregivers the user chooses to add, and where required by law).

AI Features

AI features may process user-entered medicine context, scan text, package text, images, and OCR text to generate AI-assisted medicine entry drafts (fill and scan). MedMate validates AI output before showing it to users. MedMate instructs AI systems not to diagnose, prescribe, claim medicines are safe together, or tell users to start, stop, skip, double, increase, reduce, or change medicine.

When a user requests an AI-assisted medicine fill or scan, the medicine text or scan image and relevant saved medicine context is sent to our AI providers. The current AI providers are:

DeepSeek (primary). Operated by DeepSeek, People's Republic of China and internationally. The medicine text or scan content is processed under DeepSeek's API terms and data processing agreement.
Google Gemini (fallback). Operated by Google LLC, United States. The medicine text or scan content may be processed when DeepSeek is unavailable, under Google's API terms and data processing agreement.

Neither provider receives your full account profile, Apple ID, payment records, or caregiver list. They receive only the content needed to produce the specific fill or scan draft. We do not use AI providers to train a model on your personal health data without your explicit consent.

Other service providers:

Hosting, database, and backend infrastructure: Railway and managed database providers used by MedMate.
Apple services: Sign in with Apple, StoreKit, and Apple Push Notification service.
Google services: Google Sign-In.

Purchases and Subscriptions

Medmate Personal and Medmate Family subscriptions are sold through Apple in-app purchase, offered monthly and yearly with a 7-day free trial. Subscriptions automatically renew unless canceled before the end of the current period, and can be managed in the user's Apple ID account settings.

Sharing

We may share information with:

Service providers that help operate authentication, hosting, databases, analytics, support, AI processing, and payments.
Apple for in-app purchase, restore, refund, and transaction verification.
Google for sign-in.
Caregivers or care circle members when the user chooses to share.
Authorities or other parties when required by law or to protect safety, security, and legal rights.

MedMate does not sell personal information. MedMate does not use medicine or health data for third-party advertising or tracking.

Retention

We keep information as long as needed to provide the app, comply with law, prevent fraud, resolve disputes, and maintain purchase or subscription records. Users may request deletion by contacting help@rawdestiny.com. Some purchase, refund, safety, security, and subscription records may be retained where required or reasonably necessary.

Prescription/package images used for scan/import are transient unless the user explicitly saves a medicine photo. OCR snippets stored for cache/debug are kept short, redacted, hashed, or otherwise minimized where possible.

Children

MedMate is not directed to children under 13, or under the minimum age required by local law (16 in some EU countries). We do not knowingly collect personal information from children under these ages. We do not market to children.

If we become aware that we have inadvertently collected personal information from a child under the applicable minimum age, we will delete that information promptly. If you believe a child has created an account, contact help@rawdestiny.com.

A parent, guardian, or adult caregiver may manage medication reminders for a minor using their own adult account, provided they are legally authorized to make health decisions for that minor.

International Transfers

MedMate is operated by an individual developer based in the Socialist Republic of Vietnam. Our backend infrastructure is hosted on Railway, which operates servers in the United States. AI providers (DeepSeek and Google Gemini) also operate primarily in the United States and internationally.

If you are located in the European Economic Area, the United Kingdom, or another region with data transfer restrictions, your personal data may be transferred to and processed in the United States or other countries that may not provide the same level of data protection as your home country.

Where required by applicable law, we rely on the following transfer mechanisms:

Standard Contractual Clauses (SCCs) adopted by the European Commission, incorporated into data processing agreements with our infrastructure and AI providers.
Data Processing Agreements (DPAs) with Railway, Google, and DeepSeek covering their processing of data on our behalf.

For users in Vietnam, we process personal data in accordance with the Vietnamese Personal Data Protection Decree (Decree 13/2023/ND-CP) where applicable.

If you have questions about international transfers, contact help@rawdestiny.com.

Your Choices

Users can:

Edit or delete app-entered medicine data in MedMate.
Disable notifications in iOS Settings or the app.
Disable caregiver sharing by removing connections.
Contact support for access, deletion, or account questions.

Account and Data Deletion

Users can delete their account and all associated data directly in the app:

Open MedMate.
Go to Settings.
Tap Delete Account.
Confirm the deletion.

When deletion is confirmed, MedMate sends a deletion request to our backend server, which permanently removes your medicine data, dose records, caregiver connections, photos, profile information, and care circle records.

What is retained after deletion: Apple in-app purchase transaction records (the transaction ID and purchase date, anonymized) may be retained for up to 7 years for fraud prevention and to comply with financial record-keeping obligations. These retained records cannot be used to identify you after anonymization.

If in-app deletion fails or is unavailable, users may also request deletion by emailing help@rawdestiny.com. We will process the request within 30 days.

Legal Basis for Processing (EEA and UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases under GDPR Article 6 and Article 9:

Data category	Purpose	Legal basis
Account identifiers (email, sign-in ID)	Creating and maintaining your account	Performance of a contract (Art. 6(1)(b))
Medicine and routine information	Providing reminders, sync, caregiver sharing	Performance of a contract (Art. 6(1)(b))
Medicine and health data (sensitive)	Providing the core app features	Explicit consent (Art. 9(2)(a)). You enter this data to use the app.
AI fill/scan content	Providing AI-assisted medicine entry	Consent (Art. 6(1)(a)). You initiate each AI request.
Subscription and purchase records	Running your subscription and IAP transactions	Performance of a contract and legal obligation (Art. 6(1)(b) and (c))
Diagnostics and crash data	App stability and reliability	Legitimate interests (Art. 6(1)(f)). Keeping the app safe and functional.
Security and anti-fraud records	Preventing abuse, fraud, and account compromise	Legitimate interests (Art. 6(1)(f))
IAP transaction records retained after deletion	Financial record-keeping compliance	Legal obligation (Art. 6(1)(c))

You have the right to access, correct, erase, restrict, port, and object to your data. You also have the right to withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal). To exercise these rights, use the in-app deletion flow or contact help@rawdestiny.com. You have the right to lodge a complaint with your local supervisory authority.

Diagnostics and Crash Reporting

MedMate collects diagnostic and crash data to keep the app stable and reliable.

Apple MetricKit: the iOS operating system collects anonymized crash reports, hang reports, and performance metrics and provides them to MedMate. This data does not include your medicine or health information. It is subject to Apple's privacy policy.
Apple MetricKit (performance diagnostics): We use Apple MetricKit to collect anonymized crash and performance diagnostics. This data does not include your medicine or health information and is subject to Apple's privacy policy.

Diagnostic data is used only to identify and fix bugs and performance issues. It is not used for advertising or shared with parties not involved in operating the service.

Data Breach Notification

If MedMate experiences a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users without undue delay as required by applicable law, including GDPR Article 34. Notification will be provided by email using the address associated with your account, or by prominent in-app notice. We will also notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach, where required.

Governing Law

This policy and any disputes arising from it are governed by the laws of the Socialist Republic of Vietnam, except where consumer protection laws in your country of residence require otherwise.

Contact

Questions or privacy requests: help@rawdestiny.com