Privacy Policy

1. Introduction

Welcome to MDScout ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit getmdscout.com or use our healthcare provider directory, symptom checker, health tracker, and Health Vault services (collectively, the "Services").

2. Information We Collect

We collect the following categories of information:

• Account Information: name, email address, and account credentials
• Payment Information: processed securely by our payment provider, Paddle.com. We do not store your full card details on our servers
• Health-Related Information You Choose to Provide: symptoms entered into our Symptom Checker, health metrics logged in Health Tracker (such as blood pressure readings), and documents or family member profiles you add to Health Vault
• Usage Data: search queries, pages visited, and features used
• Technical Data: IP address, browser type, device information, and cookies (see Section 4)

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Services
• Process subscription payments and send related notifications
• Store and display the health information you choose to save (e.g., in Health Tracker or Health Vault), accessible only to you
• Respond to support requests sent to support@getmdscout.com
• Monitor and analyze usage trends to improve the Services
• Detect, prevent, and address technical issues or fraudulent activity

We do not use your symptom-checker inputs or health records to train AI models, and we do not sell this information to third parties.

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Services, including:

• Google Analytics — to understand aggregate website traffic and usage patterns
• Bing Webmaster Tools — to understand how our site appears in search results
• Essential cookies — required for login sessions and basic site functionality

These tools may collect your IP address and browsing behavior in anonymized or aggregated form. You can disable cookies through your browser settings, though some features of the Services may not function properly as a result.

5. How We Share Your Information

We do not sell your personal information. We share information only with trusted service providers who help us operate the Services, including:

• Supabase — our database and authentication provider, which stores your account and health data securely
• Paddle — our payment processor, which handles billing and subscription transactions
• Google Analytics / Microsoft Bing — for aggregated website analytics

We may also disclose information if required by law, to protect our legal rights, or to protect the safety of our users.

6. Data Security

We implement industry-standard administrative, physical, and technical safeguards designed to protect your information, including encrypted data storage, access controls, and secure (HTTPS) connections. Health documents uploaded to Health Vault are stored in a private storage bucket accessible only to your authenticated account. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Health Information & HIPAA Notice

MDScout is a consumer health information and organizational tool. We are not a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA), as MDScout does not provide medical treatment, diagnosis, insurance, or billing services on behalf of healthcare providers. Information you enter into the Symptom Checker, Health Tracker, or Health Vault is stored securely for your personal reference only and is not shared with any healthcare provider, insurer, or employer unless you choose to export and share it yourself. Our Symptom Checker does not provide a medical diagnosis and is not a substitute for professional medical advice — always consult a licensed physician for medical concerns.

8. Data Retention

We retain your account and health information for as long as your account remains active, or as needed to provide the Services. If you delete your account, your personal data and health records are permanently deleted from our active systems within 30 days, except where retention is required for legal, billing, or fraud-prevention purposes.

9. Your Privacy Rights

Depending on your state of residence (including rights available to California residents under the CCPA/CPRA), you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information (note: we do not sell your data)

To exercise any of these rights, email us at support@getmdscout.com. You can also delete most of your own data directly from your account settings and the Health Vault page at any time.

10. Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@getmdscout.com and we will delete it.

11. International Users

MDScout is intended for use by individuals located in the United States seeking US-based healthcare providers. Our servers and infrastructure providers (Supabase, Vercel) may process data in the United States or other countries. By using the Services, you consent to this transfer and processing of information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have questions or comments about this policy, or wish to exercise your privacy rights, you may email us at support@getmdscout.com.