Privacy Policy

Last updated: September 23, 2026

This policy explains how your personal data is collected, used and protected when you use the MedToDate web and mobile applications (the "App").

1. Data we collect

• Account information: when you sign in with Google, your name, email address and profile picture; when you sign in with Apple, the email address Apple shares with us (which may be a private relay address). We never see or store your password.
• Usage data: your assistant chat history, favorites and app preferences — required to provide the service.
• Technical data: error logs and basic request logs (IP address, browser type), for security and service continuity.

2. How we use your data

• To verify your account and manage your session securely,
• To provide the calculator, assistant, drug and literature features,
• To improve the service and prevent abuse.

Your data is never sold for advertising and is not shared with third parties other than the service providers listed below.

3. Sharing data with AI providers

When you use the AI assistant, your question, the earlier messages of the conversation and the content of any PDF you attach are sent via our servers to one of the AI providers Google (Gemini), OpenAI or Anthropic (Claude) to generate an answer. This happens only after you give explicit consent in the app, and you can withdraw it at any time under Profile > AI data sharing. Your name, email address and account details are never sent to these providers, and the content is not used for advertising or profiling. Please do not enter information that identifies a patient. Article summaries and drug information are also generated with AI; no personal data is sent for those.

4. Retention and security

• All traffic is encrypted with TLS; sessions are managed with short-lived tokens.
• When you sign out, your token is revoked immediately on the server.
• All timestamps are stored in UTC; records are kept only for as long as necessary.

5. Third-party services

Authentication uses Google (Firebase Authentication) and Sign in with Apple. With your consent, AI assistant answers are generated by Google (Gemini), OpenAI and Anthropic (Claude). Payments are processed through Google Play and the App Store; your payment details never reach us. Literature and drug data are compiled from open sources such as PubMed, Europe PMC, OpenAlex, OpenFDA and RxNorm; no personal data is transferred to these services.

6. Your rights

To request access to, correction or deletion of your data, write to destek@medtodate.net. For details, see our KVKK Privacy Notice. For information on cookies, see our Cookie Policy.

7. Changes

This policy may be updated; material changes will be published on this page.