Privacy Policy
Last updated: August 24, 2026
MedPulse AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the MedPulse AI healthcare management platform (the "Service").
1. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, phone number, and role (patient, doctor, or administrator) provided during registration.
- Health Information: Symptom descriptions, medical questionnaire responses, appointment details, prescriptions, and AI-generated triage assessments provided voluntarily by users.
- Feedback & Reviews: Patient-submitted ratings (1 to 5 stars), clinical feedback comments, and admin-issued directive notes.
- Calendar Data: When you connect your Google Calendar, we access your calendar to create, update, and delete appointment events on your behalf. We only interact with events created by MedPulse AI.
- Usage Data: Log data, device information, and interaction patterns to improve service quality.
- Communication Data: Email addresses used for appointment reminders, medication notifications, and system alerts.
2. How We Use Your Information
We use the information collected for the following purposes:
- To provide and maintain the MedPulse AI platform and its features.
- To facilitate appointment booking, doctor-patient matching, and AI-powered triage.
- To send appointment confirmations, reminders, medication alerts, and rescheduling notifications via email.
- To sync appointment events with your Google Calendar when you grant calendar access.
- To generate AI-powered health insights, pre-visit summaries, and prescription analyses using Google Gemini.
- To enable administrative functions such as doctor verification, leave management, schedule approvals, and system analytics.
- To analyze doctor ratings and patient feedback metrics using Gemini AI to generate operational audits and performance appraisals for hospital administrators.
3. Google Calendar Integration
MedPulse AI requests access to your Google Calendar through OAuth 2.0 to:
- Create calendar events for confirmed medical appointments.
- Update calendar events when appointments are rescheduled.
- Delete calendar events when appointments are cancelled.
We do not read, modify, or delete any calendar events that were not created by MedPulse AI. We do not share your calendar data with any third parties. You can revoke calendar access at any time from your account settings or from your Google Account permissions.
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:
- With Healthcare Providers: Your health information is shared with doctors you book appointments with, to facilitate medical consultations.
- AI Processing: Patient symptom text is processed by Gemini AI to generate triage summaries and urgency classifications. Doctor consultation notes and prescriptions are parsed by Gemini AI to extract structured daily medication reminders. Patient review feedback comments and doctor workload metrics are synthesized by Gemini AI to generate administrative practice audits. All data is transmitted securely and is not stored or trained on by the AI provider.
- Email Services: We use Gmail SMTP to send transactional emails (appointment confirmations, medication reminders, etc.).
- Legal Requirements: We may disclose information if required by law or to protect the rights and safety of our users.
5. Data Security
We implement industry-standard security measures to protect your data, including:
- JWT-based authentication with access and refresh token rotation.
- Encrypted password storage using bcrypt hashing.
- OAuth 2.0 for secure Google Calendar integration.
- Role-based access control (RBAC) to restrict data visibility.
6. Data Retention
We retain your personal and health information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting us.
7. Your Rights
You have the right to:
- Access, update, or delete your personal information.
- Revoke Google Calendar access at any time.
- Opt out of non-essential email communications.
- Request a copy of your data.
8. Children's Privacy
MedPulse AI is not intended for use by individuals under the age of 18 without parental or guardian supervision. We do not knowingly collect information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at: