Privacy Policy

1. About MediArca

MediArca is building digital health infrastructure that enables individuals to securely organize, access, manage, and share their medical records and health-related information.

Our goal is to make a patient's complete medical history accessible whenever it is needed while keeping users in control of their information.

2. Information We Collect

Information You Provide

We may collect information that you voluntarily provide, including:

• Full name
• Email address
• Mobile number
• Date of birth
• Profile information
• Emergency contact information
• Medical records
• Prescriptions
• Diagnostic reports
• Laboratory reports
• Imaging reports
• Insurance-related documents
• Health-related documents uploaded by users
• Information submitted through forms, feedback, support requests, or communications

Information Collected Automatically

When you use the Services, we may automatically collect:

• Device information
• Browser information
• IP address
• Operating system information
• Usage information
• Session information
• Log data
• Analytics data
• Security-related information

Information Uploaded by Healthcare Professionals

Healthcare professionals using MediArca may upload or manage records related to patients as part of authorized healthcare workflows.

3. How We Use Information

We use information to:

• Provide and maintain MediArca Services
• Store and organize medical records
• Enable secure access to health information
• Facilitate authorized sharing of records
• Improve platform functionality and user experience
• Provide customer support
• Detect, prevent, and investigate fraud, abuse, or security incidents
• Comply with legal obligations
• Communicate important updates regarding the Services
• Develop new features and improvements

4. AI-Powered Features

MediArca may use artificial intelligence, machine learning, and automated technologies to provide features such as:

• Medical record summarization
• Document analysis
• Record categorization
• Search and retrieval assistance
• Information organization

Medical records and uploaded documents may be processed by these technologies solely for the purpose of providing and improving MediArca features.

AI-generated outputs are provided for informational purposes only and may contain inaccuracies, omissions, or errors.

Users should not rely solely on AI-generated summaries or insights for medical decisions, diagnosis, treatment, or emergency care.

Healthcare decisions should always be made in consultation with qualified healthcare professionals.

5. Ownership and Control of Medical Records

Patients retain ownership and control of their personal health information and medical records uploaded to or managed through MediArca, subject to applicable laws and legitimate healthcare provider obligations.

MediArca does not claim ownership of medical records, prescriptions, reports, or other health-related documents stored on the platform.

Users control when and how their records are shared through the Services.

6. Healthcare Professional Accounts

MediArca may offer accounts for healthcare professionals.

Healthcare professionals may be required to undergo identity, credential, clinic, or practice verification before access to certain features is granted.

MediArca reserves the right to approve, reject, suspend, or revoke healthcare professional accounts at its discretion where necessary to protect users, maintain platform integrity, or comply with applicable requirements.

7. Sharing of Information

MediArca does not sell personal information or medical records.

We may share information only under the following circumstances:

User-Authorized Sharing

Information may be shared when users explicitly authorize or initiate sharing through platform features.

Healthcare Interactions

Users may choose to share records with healthcare professionals through MediArca.

Service Providers

We may engage trusted third-party service providers that assist in operating, maintaining, securing, and improving our Services.

Legal Requirements

We may disclose information when required by law, regulation, court order, legal process, or government request.

Protection of Rights and Safety

We may disclose information when reasonably necessary to protect the rights, safety, property, security, or integrity of MediArca, our users, or the public.

8. Cloud Storage and Infrastructure

Medical records and uploaded documents may be stored, processed, or transmitted using trusted third-party cloud infrastructure and technology providers that support MediArca's operations.

These providers are required to maintain reasonable security measures and may access information only to the extent necessary to provide services on our behalf.

9. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal and health-related information from unauthorized access, disclosure, alteration, misuse, or destruction.

However, no method of electronic transmission, cloud storage, or internet-based service can be guaranteed to be completely secure. Users acknowledge that no security system is infallible.

10. Data Retention

We retain information for as long as necessary to:

• Provide Services
• Maintain user accounts
• Fulfill contractual obligations
• Resolve disputes
• Enforce agreements
• Comply with legal and regulatory requirements

Users may request deletion of their account and associated information, subject to applicable legal obligations and retention requirements.

11. User Rights

Subject to applicable laws, users may have the right to:

• Access their information
• Update or correct inaccurate information
• Request deletion of information
• Withdraw consent where applicable
• Request information regarding data processing practices

Requests may be submitted using the contact information provided below.

12. Children's Privacy

MediArca is not intended for individuals who are not legally permitted to provide consent under applicable laws.

Parents or legal guardians may manage information and records on behalf of dependents where permitted by law.

13. Third-Party Services

The Services may contain links to third-party websites, applications, or services.

MediArca does not control and is not responsible for the privacy practices, content, or policies of third parties. Users are encouraged to review third-party privacy policies before providing information.

14. International Data Transfers

Information may be processed or stored in locations outside a user's state, province, or country.

Where such transfers occur, MediArca will take reasonable measures to protect information in accordance with applicable laws.

15. No Medical Advice

MediArca is a health record management and digital health infrastructure platform.

MediArca is not a hospital, clinic, healthcare provider, diagnostic center, insurance provider, emergency service, or medical practitioner.

Nothing on the platform, including AI-generated outputs, summaries, insights, or information, constitutes medical advice, diagnosis, treatment, or professional healthcare services.

Users should always consult qualified healthcare professionals regarding medical concerns.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Updated versions will be posted on this page together with a revised"Last Updated"date. Continued use of the Services following publication of changes constitutes acceptance of the revised Privacy Policy.

17. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your information, please contact: