Privacy Policy
Last updated: 4 November 2026
This Privacy Policy explains what information MedAI collects, why, who processes it, how long it is kept, and the choices you have. It applies to the MedAI app for iPhone and iPad (the "App") and to this website, medai-landing.web.app (the "Website"). MedAI is operated by Pixoby ("we", "us", "our").
MedAI is an AI clinical reference tool for physicians and other healthcare professionals. It is not a medical device and is not intended for patients.
The short version
- You can use MedAI without signing up. We create an anonymous account on first launch.
- Your questions, images and tool inputs are sent to our server and to a third-party AI provider to generate answers. Do not enter patient identifiers.
- Your results are stored in your account history so you can come back to them. You can delete any item, or your whole account, at any time.
- We show no ads and we do not sell your personal information.
1. Information we collect
Information you give us
- Questions and conversations. The clinical questions you ask, follow-ups, and the answers and citations generated for them.
- Images. Images you upload for analysis (for example an ECG, X-ray, CT or MRI image, ultrasound, skin photo, lab report or pathology image) and the structured reports generated from them.
- Tool inputs. What you enter into the AI tools (drug interaction checker, lab interpreter, differential diagnosis builder, note writer), including dictated text, and the outputs.
- Professional profile. The role and specialty focus you choose. These are stored on your device and sent with each AI request so answers fit your context.
- Feedback and reports. If you report an answer or contact support, the content of the report or message.
- Account details, if you sign in. Your email address (passwords are stored only as secure hashes). If you sign in with Apple or Google, we receive the email address and, if you share it, the name from that account. With Sign in with Apple you can choose to hide your email, and we then receive a private relay address from Apple. We never receive your Apple or Google password.
Patient information. MedAI is designed to be used with de-identified clinical details only. You must not enter names, dates of birth, medical record or insurance numbers, addresses, phone numbers, full-face photos or any other information that identifies a patient, and you should crop names and labels out of images. We do not want and do not intend to process identifiable patient health information. If you believe identifiable patient information was entered, delete the item in the App or contact us.
Information collected automatically
- Account identifier. A random identifier for your anonymous or signed-in account.
- Usage counts. How many AI requests you have made each day, to protect the service from abuse.
- Subscription status. Whether you have MedAI Pro, the product, and store transaction identifiers needed to unlock and restore it. We never receive your card details.
- App analytics. Screens viewed and actions taken in the App, device model, operating system, app version, language, approximate region derived from IP address, and an app instance identifier.
- Crash and diagnostic data. Crash reports, error logs and performance data so we can find and fix problems.
- Push token. If you allow notifications, a device token used to deliver them.
- Website. If analytics is enabled on the Website, Google Analytics records page views and clicks. Your language and theme choices are stored in your browser.
The offline calculators run entirely on your device. Their inputs are not sent to us.
2. Why we use it (and our legal bases)
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Generate answers, image reports and tool outputs, and find sources to cite | Questions, images, tool inputs, professional profile | Performance of our contract with you |
| Save your history, favorites and library | Questions, images, outputs, account identifier | Performance of contract |
| Create and secure your account, sign-in | Account details, account identifier | Performance of contract; legitimate interests (security) |
| Provide MedAI Pro and protect the service from abuse | Usage counts, subscription status | Performance of contract |
| Fix crashes and errors | Crash and diagnostic data | Legitimate interests (a working, secure App) |
| Understand how the App and Website are used and improve them | Analytics data | Legitimate interests, or consent where the law requires it |
| Send notifications and service emails (such as password reset) | Push token, email address | Consent (notifications); performance of contract (service emails) |
| Respond to support requests and reports | Messages, reports, account identifier | Legitimate interests |
| Comply with law and protect users and the service | Any of the above, as needed | Legal obligation; legitimate interests |
We do not use your questions, images or tool inputs to show ads or to build advertising profiles, and we do not use them to train our own AI models.
3. Who processes your data
We share information only with the service providers below, each acting on our behalf for the stated purpose. We do not sell personal information and we do not share it for cross-context behavioral advertising.
| Provider | Purpose | Data |
|---|---|---|
| DigitalOcean | Hosting of our servers, database and file storage | All data stored in your account |
| AI model provider (accessed through OpenRouter) | Generating answers, image reports and tool outputs | The question, image or tool input of each request, with your role and specialty |
| Web search API provider | Finding authoritative sources to cite | A search query derived from your question (no account details) |
| Google Firebase and Google Analytics | App and Website analytics; push notification delivery | Analytics data, app instance identifier, push token |
| RevenueCat | Managing subscriptions and restoring purchases | Account identifier, subscription and transaction data |
| Tenjin | Measuring which ad campaigns lead to installs and subscriptions | Install and purchase events, account identifier, device and advertising identifiers (Apple Search Ads attribution token on iOS; Google advertising ID on Android), approximate location from IP address |
| Apple | App distribution, payments, push notifications, Sign in with Apple | Purchase data; for Sign in with Apple, the sign-in request and the email and name Apple returns |
| Sign in with Google | The sign-in request and the email and name Google returns | |
| GlitchTip | Crash and error reporting | Crash reports, diagnostic data, account identifier |
| Brevo | Sending service emails | Email address, email content |
We may also disclose information if required by law, to protect the rights, safety and security of users or the service, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.
4. International transfers
Our providers may process data in countries other than your own, including the United States and the European Union. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Questions, images, tool inputs and outputs: kept in your account history until you delete the item or your account.
- Account details: kept until you delete your account.
- Usage counts: kept only as long as needed to apply the daily limit and prevent abuse.
- Requests to the AI and search providers: processed to return a result. Providers may keep request logs for a limited period under their own terms for abuse monitoring and security.
- Crash reports and analytics: kept by our providers for the retention period configured for MedAI, then deleted automatically. They are not used to identify you after your account is deleted.
- Purchase records: kept by Apple and RevenueCat as long as required for tax and accounting.
- Support emails: kept as long as needed to resolve your request, then deleted.
6. Deleting your data
You can delete any single conversation, analysis or tool result in the App. To delete your account and everything stored with it, open the App, go to your profile, then Account, and tap Delete account. You can also ask us by email. See how to delete your MedAI account for the full steps and what is kept.
Deleting your account does not cancel a MedAI Pro subscription. Cancel it in your Apple ID subscription settings.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent at any time. To exercise these rights, email info@pixoby.space from the address linked to your account. If you never signed in, tell us the device you used and roughly when, so we can find the anonymous account. We respond within 30 days. You also have the right to complain to your data protection authority.
California residents (CCPA / CPRA)
In the last 12 months we collected the categories described in section 1: identifiers (account identifier, email, device identifiers), commercial information (subscription status), internet or network activity (analytics), and the content you submit. We use them only for the purposes in section 2. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use sensitive personal information to infer characteristics about you. You have the right to know, delete and correct your information and not to be discriminated against for exercising these rights. Use the contact details below to make a request; an authorized agent may make a request on your behalf.
8. Security
Data is encrypted in transit. Access to our servers is restricted, sign-in tokens are kept in secure device storage, and passwords are stored only as hashes. No system is perfectly secure, which is another reason never to enter patient identifiers.
9. Children
MedAI is for healthcare professionals and is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has used MedAI, contact us and we will delete the account.
10. Medical disclaimer
MedAI provides AI-generated reference information to support, not replace, the judgement of qualified healthcare professionals. It is not a medical device, does not diagnose or treat, may be inaccurate or incomplete, and is not for emergencies. See the Terms of Use.
11. Changes to this policy
We may update this policy. We will post the new version here and change the date at the top. If the changes are material, we will take reasonable steps to let you know, for example with a notice in the App.
12. Contact
Questions or requests about privacy: info@pixoby.space
Related: Terms of Use · Delete your account · Support