Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how iMediq ("we", "the service", "the app") collects, uses, stores, and protects your information. By using iMediq through our Telegram bot, iOS application, or web Mini App, you agree to the practices described below.

1. Who we are

iMediq is an independent, privately operated informational service. For any privacy-related question, contact [email protected].

2. Information we collect

Account data: Telegram user ID, Apple ID, or Google ID — used only to identify you across sessions. We never receive your Apple or Google password.
Profile data you provide: name, date of birth, sex assigned at birth, weight, height, medical history, allergies, lifestyle notes, family medical history.
Health data you upload: photos and PDFs of lab results and prescriptions, and the structured biomarker values extracted from them.
Apple Health data (optional, iOS only): if you connect Apple Health, iMediq can import lab results via Apple's Clinical Health Records API (a Premium feature, only when you initiate the import), and — if enabled in Settings — read your weight/height and write lab biomarkers back to Apple Health.
Medication data: names, dosages, schedules, and compliance logs for medications you choose to track.
Usage data: timestamps of feature use, language preference, timezone, and aggregate funnel events used to improve the service.

3. How we use your information

We process your data exclusively to:

Extract biomarker values from lab documents and display them to you.
Generate informational summaries and general wellness recommendations.
Remind you about medications, retesting intervals, and follow-ups you have requested.
Maintain your account and deliver the service across Telegram, iOS, and web.

We do not use your health data for advertising, behavioral profiling, or training third-party AI models.

4. How we store and protect your data

All personally identifying and medical fields (names, profile attributes, lab results, medications, prescriptions, family member names) are encrypted at rest using Fernet symmetric encryption. Data is transmitted over TLS 1.2+ only. Backups are encrypted and access-controlled.

We store data on MongoDB Atlas (United States / European Union regions) and on our application servers hosted with Hetzner (Germany).

5. Third-party services

To deliver the service we transmit limited data to the following processors:

Anthropic — content and images of your lab results and prescriptions, and your AI chat messages, for AI interpretation. Anthropic is contractually prohibited from training on our API data.
Resend / Postmark — if you use the "Book by email" feature, these providers deliver the appointment-request email you reviewed and approved to the clinic you selected, and relay the clinic's reply back to you.
Telegram Messenger — required to operate the Telegram bot and Mini App.
Apple Sign In and Google Sign In — for authentication only (email and name where you authorize it).
CryptoBot and Telegram Stars — payment processing for Telegram/web premium subscriptions. We never see your card details.
RevenueCat — subscription management and receipt validation for iOS in-app purchases. RevenueCat receives your anonymised app user ID and purchase transaction data. No health or profile data is shared. RevenueCat Privacy Policy.
Sentry — crash reporting for the iOS app. Sentry receives crash stack traces and device metadata (OS version, device model) to help us fix bugs. Screenshots and view hierarchy are never captured (attachScreenshot=false). No health data, lab results, or personally identifiable information is included in crash reports (sendDefaultPii=false). Sentry Privacy Policy.

6. Data retention

We keep your data until you delete it. You can delete individual items (analyses, prescriptions, medications, family members) at any time from the app, and you can erase your entire account with one action in Profile → Delete data. Deletion is immediate and irreversible.

7. Your rights

You may at any time:

Access your data through the iMediq app.
Correct your profile directly in the app.
Export your data using the /export_data command in the bot — you receive a JSON file with all your records.
Delete individual records or your full account.
Withdraw consent by deleting your account.

Users in the European Economic Area, United Kingdom, and California have additional rights under the GDPR, UK GDPR, and CCPA respectively, including the right to lodge a complaint with a supervisory authority.

8. Children

iMediq is not intended for users under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Medical disclaimer

iMediq is not a medical device. Its output is informational only and does not constitute medical advice, diagnosis, or treatment. Always consult a licensed healthcare professional before making any decision about your health.

10. International transfers

Your data may be transferred to and processed in countries other than your own. Where required, we rely on Standard Contractual Clauses approved by the European Commission to safeguard such transfers.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app at least 14 days before they take effect. The "Last updated" date above reflects the current version.

12. Contact

For any question about this policy or your data, email [email protected].