MedPath logoMedPath Lab

MedPath App Privacy Policy

This Privacy Policy explains how MedPath AI Pte. Ltd. (hereinafter referred to as "MedPath" or "we") collects, uses, protects, and manages your personal information when you use the MedPath Application. MedPath respects and protects your privacy and will only process your data for the purposes of providing services, improving experience, or complying with legal requirements. MedPath's services are intended for adult use and are not applicable to users under 18 years of age. Please carefully read and understand this Privacy Policy before using our products (or services).

By using the MedPath Application, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

If you do not agree to any provision of this Privacy Policy, please immediately cease using the MedPath Application.

1. Information We Collect and Its Purpose

We collect, use, or disclose only the information necessary to provide services, based on the principle of minimization:

  • Account Information: Email address, Google/Apple login credentials, avatar, nickname, password (if applicable), used for account registration, identity verification, and personalized display.
  • Insurance Documents: PDF files you upload (≤10MB), used only to identify insurance plans and match clinic information, not for any other purpose.
  • Location Information: Collected only when you actively use the "Find Nearby Clinics or Doctors" feature, used to display results and map navigation; data is processed locally only and is not uploaded to servers.
  • Device and Usage Data: Anonymous device information and crash logs collected through Sentry, used to improve performance and stability.

Your data is used only to provide and improve services and will not be used for unauthorized purposes.

Each of MedPath's services requires certain information to complete. When you withdraw some or all consent, we cannot continue to provide you with the corresponding services and will no longer process your corresponding information. However, your decision to withdraw some or all consent will not affect information processing that was conducted based on your consent prior to such withdrawal.

2. Use of Third-Party SDKs

To ensure the functionality of the MedPath Application, we have integrated certain third-party SDKs. These services may independently collect or process necessary data, including:

  • Google Analytics

    • Types of Information Collected: Device information (model, system version), application usage data (page visits, feature usage frequency), network information (network type, IP address)
    • Purpose of Use: Analyze user behavior, optimize application performance and user experience
    • Privacy Policy Link: https://policies.google.com/privacy

  • EXPO

    • Types of Information Collected: Device information, application running status, crash logs
    • Purpose of Use: Provide cross-platform development support, monitor application performance, improve application stability
    • Privacy Policy Link: https://expo.dev/privacy

  • Sentry SDK

    • Types of Information Collected: Device sensor information, application crash logs, error stack traces, device information (model, system version, etc.)
    • Purpose of Use: Monitor application performance, detect and diagnose application errors, improve application stability
    • Privacy Policy Link: https://sentry.io/privacy/

  • Google Maps SDK

    • Types of Information Collected: Geographic location information, map interaction data (zoom, pan, search), device location permissions
    • Purpose of Use: Display GP clinic and specialist locations, provide navigation features, location-based search services
    • Privacy Policy Link: https://policies.google.com/privacy

You agree to the collection and use of data by the above-mentioned third-party SDKs and agree that the collected and processed data will be handled in accordance with the third-party SDK privacy policies.

When meeting new service needs and business function changes, we may adjust the third-party SDKs we integrate. We will promptly explain the latest status of third-party SDK integration in the updated Privacy Policy.

3. Data Storage and Security

3.1. MedPath retains user data only for the purposes specified in this Privacy Policy and for the period required by relevant laws. User data is stored on AWS Singapore regional servers and complies with the requirements of Singapore's Personal Data Protection Act (PDPA).

3.2. We employ reasonable measures such as encrypted transmission and access control to ensure information security. However, transmitting information over the internet is not absolutely secure. We cannot guarantee the security of customer data transmitted through the mobile application; any transmission risk shall be borne by the customer.

3.3. Please do not disclose your account information. MedPath assumes no responsibility for consequences resulting from your own disclosure of information.

3.4. MedPath's services include links to external websites of third-party doctors or clinics (including but not limited to appointment pages, official clinic websites, etc.). If you click on third-party links, you will be directed to that third party's website. MedPath has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party websites or services.

4. Your Rights and Control

You may:

  • View and modify personal information (avatar, nickname, email);
  • Revoke location permissions;
  • Deactivate your account and request deletion of personal data.

MedPath will process your requests within a reasonable time.

Deactivating your account and requesting deletion of personal data constitutes the user's withdrawal of consent for MedPath to collect and use their personal data. The user will be unable to log in and use MedPath through that account, but this will not affect information processing that was conducted based on your consent prior to such withdrawal.

5. Data Retention and Deletion

MedPath retains data only for the period necessary to achieve service purposes. After you submit a deletion or deactivation request, MedPath will delete data records in the primary system within 24 hours. Due to system security and backup mechanisms, residual data may be briefly retained in backup systems but will not be collected, used, or disclosed.

6. Applicable Law and Dispute Resolution

6.1. The conclusion, performance, and interpretation of this Privacy Policy shall be governed by the laws of the Republic of Singapore.

6.2. Disputes arising from this Privacy Policy shall first be resolved through amicable negotiation between the parties; if negotiation fails, either party may submit the matter to the Singapore International Arbitration Centre for resolution through arbitration. Arbitration fees, attorney fees, and other rights protection expenses shall be borne by the party whose arbitration claim is not supported.

7. Privacy Policy Updates and Contact

MedPath may update this policy due to legal or service adjustments. Updated versions will be published within the Application or on the official website and will be marked with the "Last Updated Date." Users' continued use of the MedPath Application shall be deemed as acceptance of the revised Privacy Policy.

If you have any questions, complaints, or suggestions, please contact us through the following:

📩 [app@medpath.com]

Last Updated: 2025-10

Effective Date: 2025-10