MediTox
Privacy Policy
This policy explains how MediTox ("we", "us") handles information in the MediTox mobile app and website (the "Service"). MediTox is a clinical decision-support tool for licensed healthcare professionals. It is not intended for consumers or for patient self-diagnosis, and it does not replace professional medical judgment or a poison-control centre.
1. Information we collect
- Account information — email address or phone number used to sign in, via Google or phone authentication (Firebase Authentication).
- Clinician profile — display name, specialty, and institution you provide.
- Clinical inputs — the anamnesis and case data a clinician enters (substances, doses, vitals, labs, symptoms). This is professional case data entered by the user. Data shared with a consulting specialist is de-identified — the specialist sees the clinical picture without the patient's identity.
- Usage and audit records — queries made, features used, and interaction logs kept for clinical audit and quality assurance.
- Consultation data — when you use tele-consults, session metadata (duration, cost, rating) and real-time audio/video routed for the call.
- Payment information — handled by our payment processor; we do not store full card details.
- Device and technical data — device type, app version, and diagnostic/crash information.
2. How we use information
- To provide clinical decision support, antidote calculations, and specialist consultations.
- To authenticate users and secure accounts.
- To maintain audit trails required for clinical and regulatory purposes.
- To operate, maintain, debug, and improve the Service.
- To process payments and prevent fraud.
3. Service providers
We use trusted third parties to provide parts of the Service. They process data on our behalf under their own terms and privacy policies:
| Provider | Purpose |
|---|---|
| Google Firebase | Authentication, hosting, notifications |
| Google (Gemini API) | AI generation of toxicology assessments |
| LiveKit | Real-time video consultation |
| Deepgram | Speech-to-text for voice input |
| DeepL | Real-time language translation |
| Stripe | Payment processing |
| Twilio | Phone/messaging notifications |
4. Data retention
We keep account data while your account is active. Clinical audit records are retained for the period required by applicable clinical and regulatory obligations (currently up to seven years). You may request deletion of your account data, subject to records we are legally required to retain.
5. Security
Data is encrypted in transit (TLS). We apply access controls, authentication, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact privacy@meditox.ai. We will respond within the timeframe required by applicable law.
7. Children
The Service is intended for healthcare professionals and is not directed to children. We do not knowingly collect personal data from children.
8. International transfers
Your data may be processed in countries other than your own, including where our service providers operate. Where required, we use appropriate safeguards for such transfers.
9. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with a revised "Last updated" date.
10. Contact
MediTox — privacy@meditox.ai