Updated: 12 May 2025
This Privacy Policy explains how we collect, use, disclose and safeguard your personal and health-related information when you:
Please read it carefully. By accessing or using our Services, you consent to the practices described herein and to our Terms of Service. If you do not agree, please do not use our Services.
When you create a member account, we collect the following personal and health information, as necessary to provide the Services:
We will clearly explain at the point of collection which fields are mandatory and why.
We use your information to:
We will not sell your personal or medical information. We share it only in the following circumstances:
| Recipient | Purpose | Legal Basis / Safeguard |
|---|---|---|
| Your Chosen Healthcare Professionals | To facilitate consultation and treatment | You consent at the time of consultation |
| Contracted Medical Experts | To train and audit our AI, under strict confidentiality agreements | Encrypted, de-identified data whenever possible |
| Service Providers (e.g. hosting, analytics, messaging platforms) | To operate and maintain the Services | Under data-processing agreements |
| Legal Authorities | To comply with laws, regulations or court orders | Where required by statute |
| Public Health & Research Bodies | For population-health monitoring or approved research | Only aggregated, fully de-identified data; subject to governance processes |
We use cookies, web beacons and similar technologies to:
You may disable cookies in your browser, but some features of our Services may not function correctly.
With your consent, we may send appointment reminders, triage updates and service alerts via SMS or push notifications. We do not share your opt-in status with third parties other than our messaging providers, who are bound by confidentiality.
Third Parties that Help Provide the Messaging Service: We will not share your opt-in to an SMS short code campaign with a third party for purposes unrelated to supporting you in connection with that campaign. We may share your Personal Data with third parties that help us provide the messaging service, including, but not limited to, platform providers, phone companies, and other vendors who assist us in the delivery of text messages.
Additional Disclosures: Affiliates: We may disclose the Personal Data to our affiliates or subsidiaries; however, if we do so, their use and disclosure of your Personal Data will be subject to this Policy. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Where processing is based on consent, you may withdraw consent at any time; this will not affect processing already completed.
To exercise any of these rights, contact our Data Protection Officer as set out below. We will respond within the time required by applicable law (typically one month).
Our Services are intended for adults (age 18+). We do not knowingly collect personal data from children under 13. If you believe your child has provided us with personal data, please contact us and we will delete it promptly.
Medroid AI operates globally. When we transfer personal data across borders (e.g. from the UK or EU to the US), we rely on permitted mechanisms such as Standard Contractual Clauses or adequacy decisions to ensure an adequate level of protection.
We may update this Policy from time to time. Any material changes will be notified by posting the revised Policy with a new "Updated" date. Your continued use of the Services constitutes acceptance of the updated Policy.
If you have questions, wish to exercise your rights, or lodge a complaint, please contact:
Data Protection Officer
Email: [email protected]
Postal: Medroid AI, Inc, 131 Continental Dr, Suite 305, Newark, DE 19713, USA
If you remain dissatisfied, UK and EU residents may lodge a complaint with their supervisory authority (e.g. the ICO in the UK).
Thank you for entrusting Medroid AI with your data.