Privacy Policy for MedEntry

Effective Date: March 10, 2026  |  Last Updated: March 10, 2026

MedEntry ("we", "our", or "the app") is a personal medical expense tracker designed for families. We are committed to protecting your privacy and being transparent about how your data is handled.

1. Information We Collect

Data You Provide Directly:

• Family Member Information: Names, relations, date of birth, and blood group of family members you add.
• Medical Entry Data: Hospital names, doctor names, dates, amounts paid, diagnoses, prescription notes, payment modes, insurance claim details, follow-up dates, and test details.
• Attachments: Photographs of prescriptions, bills, or reports that you choose to attach to entries.

Data Collected Automatically:

• Device Information (via Ads): If the app displays advertisements (via Google AdMob), the ad network may collect device identifiers, IP address, and general location data to serve relevant ads. This data is collected by Google, not by us. See Google's Privacy Policy.
• Crash Reports: Anonymous crash data may be collected via the Expo framework to help us improve app stability. No personal or medical data is included in crash reports.

2. How Your Data Is Stored

• All medical and personal data is stored locally in an SQLite database on your device's internal app storage.
• Attachments (images) are stored in the app's private internal storage directory.
• On modern Android devices (6.0+), app internal storage is encrypted by default when a device lock screen is set.
• We do not have access to, nor can we retrieve, any of your locally stored data.

3. Google Drive Backup (Optional)

MedEntry may offer an optional Google Drive backup feature. If you choose to enable it:

• Your database and attachments will be compressed and uploaded to your personal Google Drive account.
• We use Google Sign-In (OAuth 2.0) to authenticate. We only request access to a dedicated app-specific folder in your Drive.
• Backup files are stored in your own Google Drive — we do not have access to your Google account or its contents.
• You can delete your backup files at any time from your Google Drive.

4. Third-Party Services

The app may use the following third-party services:

• Google AdMob: For displaying advertisements. AdMob may collect and use data as described in Google's Advertising Policies. You can opt out of personalized ads in your device's Google Settings.
• Google Drive API: For optional backup and restore functionality (see Section 3).
• Expo / React Native: The app framework. Anonymous usage data and crash reports may be sent to Expo's telemetry service.

5. Data Sharing

Your data may only leave your device when:

• You explicitly choose to export your data as CSV or PDF and share it.
• You explicitly choose to back up your data to your Google Drive.
• Advertisements are displayed (only ad-related device identifiers are shared with Google AdMob, not your medical data).

6. Data Security

• The app stores data in Android's sandboxed internal storage, which is inaccessible to other apps.
• Optional biometric/PIN app lock adds another layer of access protection.
• Backup data uploaded to Google Drive is transmitted over HTTPS (encrypted in transit).

7. Your Rights & Data Control

You have full control over your data:

• View: All your data is visible within the app at all times.
• Export: Export your data as CSV or PDF from Settings.
• Delete: Use "Clear All Data" in Settings to permanently delete all entries and members from the local database.
• Uninstall: Uninstalling the app removes all locally stored data including the database and attachments.

8. Children's Privacy

MedEntry is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you are a parent and believe your child has provided personal information through the app, please contact us and we will take steps to delete such information.

9. Advertisements

MedEntry may display banner advertisements powered by Google AdMob. These ads help keep the app free. Your medical data is never used for ad targeting. Ad personalization is managed by Google and can be controlled through your device's advertising settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.