Privacy Policy

Last updated: September 12, 2026

This policy is written for a California-based business and reflects how MedPocket AI works today, but it's a general template, not legal advice, and hasn't been reviewed by an attorney — have qualified counsel confirm it meets your specific CCPA/CPRA obligations before relying on it for a real launch, especially if you handle information subject to HIPAA or serve users outside the U.S.

1. Who this policy covers

This Privacy Policy explains how MedPocket AI ("MedPocket AI," "we," "us") collects, uses, shares, and protects information when you use our website, account, and "My Pocket" dashboard (together, the "Service"). By creating an account or using the Service, you agree to the collection and use of information as described here.

2. Information we collect

Account information. When you sign up, we collect your name, email address, phone number, and a securely hashed version of your password. We never store your password in plain text.

Health-related content you provide. Anything you choose to enter or upload — medications, dosages, appointments, family member profiles, documents, and the questions you type or speak to MedPocket AI. You control what you enter; we don't pull this information from anywhere else.

Payment information. If you subscribe to Plus or Family, billing is handled entirely by Stripe. We receive limited information back from Stripe (such as your subscription status and plan) but we never see or store your full card number.

Usage information. How many voice interactions and appointment preparations you've used, your current plan, and basic technical data (like IP address and browser type) collected automatically for security and troubleshooting.

3. How we use your information

We use your information to: operate and secure your account; respond to the questions and documents you submit through our AI provider; enforce plan limits (for example, the Free plan's usage caps); process payments through Stripe; respond to messages you send us; and improve the Service. We do not sell your personal information, and we do not use your health-related content for advertising.

4. Third parties we share information with

AI processing. When you ask MedPocket AI a question or upload a document, that content is sent to our third-party AI provider (OpenAI) to generate a response. Please don't submit anything you wouldn't want processed by a third-party AI service.

Payments. Stripe processes all subscription payments and stores your payment method under its own privacy policy.

Hosting. Our website and database are hosted on Hostinger's infrastructure.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5. Not a healthcare provider, not HIPAA compliant

MedPocket AI is a consumer information and organization tool. We are not a covered entity or business associate under HIPAA, and the Service is not designed or certified to store protected health information on behalf of a healthcare provider. Please keep this in mind when deciding what to enter.

6. Data retention and deletion

You can delete individual medications, appointments, or family profiles at any time from My Pocket. To delete your entire account and associated data, email us at the address below — we will remove your account information within a reasonable time, except where we're required to retain limited records (for example, transaction records for tax or legal purposes).

7. Security

We use industry-standard measures such as password hashing, encrypted connections (HTTPS), and access controls to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's privacy

MedPocket AI is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Your choices and rights

You can access, update, or delete most of your information directly from your account. Depending on where you live, you may have additional rights described below.

California residents (CCPA/CPRA). You have the right to know what personal information we've collected about you, request deletion of it, and correct inaccurate information. We do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of in that respect. We will not discriminate against you for exercising any of these rights. To submit a request, email us at the address below — we may need to verify your identity before completing it.

If you're outside the U.S., you may have similar rights under laws like the GDPR (EU/UK) — such as requesting a copy of your data or objecting to certain processing. Contact us to make such a request.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above. Continued use of the Service after changes means you accept the updated policy.

11. Contact us

Questions about this policy or your data? Email medpocketai@yahoo.com.