Transparency regarding how MedQ+ collects, uses, safeguards, and provides user control over sensitive personal, medical, and device data.
Privacy Commitments at a Glance
No Sale of Data: We never sell, rent, or trade your personal or health information to third-party data brokers or advertisers.
Healthcare Purpose: Data is collected solely to schedule doctor consultations, facilitate live queue token tracking, and deliver healthcare services.
Transparent Permissions: Location, camera, and microphone are requested only for specific features (finding nearby clinics, document upload, and voice search) and never run in the background.
User Control & Deletion: You have the right to inspect, edit, or permanently delete your account and personal data at any time.
1. Overview & Scope
This Privacy Policy applies to the MedQ+ mobile applications (for Android and iOS, package/bundle identifier com.medreachplus) and the associated web portal. MedQ+ is operated to provide digital healthcare appointment booking, live hospital and clinic queue token management, and doctor discovery.
By accessing or using MedQ+, you acknowledge the collection and handling of your information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.
2. Information We Collect
We collect information to provide you with seamless appointment scheduling, live wait-time tracking, and medical record management. The information collected falls into the following categories:
A. Personal Account & Contact Information
Profile Identifiers: Your full name, mobile telephone number, and email address.
Third-Party Authentication (Google Sign-In): If you choose to sign in using Google, we receive your basic Google profile details (name, email address, and avatar image) as authorized by your Google account settings.
User Role: Whether you use the service as a patient, registered doctor, hospital manager, or clinic receptionist.
B. Healthcare & Consultation Information
Patient Profile Data: Patient name, age, gender, and relationship to the account holder (e.g. self, spouse, parent, or child).
Booking Details: Selected healthcare provider, specialty, hospital/clinic address, appointment date, time slot, and booking status (scheduled, completed, cancelled, rescheduled).
Live Queue & Token Data: Queue token numbers, estimated consultation times, queue position, check-in timestamps, and doctor consultation progress.
Health Notes & Uploaded Documents: Symptoms, reason for visit, medical history voluntarily entered by you, and medical certificates, lab reports, or previous prescriptions that you choose to upload.
C. Device Permissions & Sensitive Data Disclosures
MedQ+ requests specific device permissions to enable core healthcare features. We disclose these clearly in accordance with Google Play developer policies:
Location Data (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION)
How it is used: When granted, your location is used exclusively while the app is active in the foreground to show doctors, clinics, and hospitals nearest to you, calculate approximate distances, and provide driving/transit directions.
Background Tracking: MedQ+ does not track, record, or monitor your location in the background when the app is closed.
User Choice: Location access is optional. If denied, you can still search for healthcare providers by manually typing a city or area name.
Microphone & Speech Recognition (RECORD_AUDIO)
How it is used: The microphone is accessed only when you explicitly tap the voice-search microphone icon in our search bar to speak doctor names, symptoms, or medical specialties.
Processing: Speech audio is transcribed into text in real time. We do not record or retain your raw voice audio files on MedQ+ servers.
Camera & Photo Library (CAMERA, Image Picker)
How it is used: Accessed only when you choose to photograph or attach medical certificates, past prescriptions, lab documents, or profile pictures.
Scope: MedQ+ only reads the specific images or documents you intentionally select and upload.
D. Technical & Log Information
System Data: Device model, operating system version, browser user-agent, IP address, and unique installation IDs.
App Performance: Crash diagnostics, error logs, and performance metrics to maintain high reliability and fix bugs.
3. How We Use Your Information
We use the collected information for the following specific purposes:
Facilitating Healthcare Consultations: Enabling you to search for doctors, book appointments, generate digital queue tokens, and view live hospital wait times.
Appointment & Queue Alerts: Sending critical transactional notifications via SMS, WhatsApp, or push alerts regarding booking confirmations, cancellations, queue delays, and token calls.
Provider Coordination: Displaying scheduled patient details to the treating doctor and verified hospital reception desk for patient check-in and clinical care.
Account Verification & Security: Authenticating sign-in requests, verifying phone numbers via OTP, preventing fraudulent bookings, and protecting account integrity.
Customer Care: Investigating and resolving user queries, technical glitches, or refund/rescheduling issues.
Regulatory & Accounting Compliance: Maintaining clinical audit trails, appointment logs, and financial records as mandated by applicable healthcare and tax regulations.
4. Data Sharing & Third-Party Disclosures
We do NOT sell personal data: MedQ+ does not sell, rent, monetize, or disclose your personal or medical data to third-party marketers, advertisers, or data brokers under any circumstances.
We disclose user information only to the following specific parties to deliver our services:
1. Healthcare Providers & Clinics: When you book an appointment or acquire a token, your patient name, contact number, age, gender, appointment details, and uploaded medical documents are shared with the specific doctor, hospital, and reception staff who will provide your treatment.
2. Cloud & Hosting Infrastructure: We utilize secure cloud hosting providers (such as Railway and Vercel) and enterprise database services to safely run our servers, manage APIs, and store data with encryption.
3. Authentication Services: Google Identity Services are used for users opting into Google Sign-In to verify authentication tokens securely.
4. Mapping & Location Services: Google Maps Platform API is utilized to translate addresses, show clinic markers on maps, and compute travel distance.
5. Telecommunication & Notification Gateways: Authorized telecom and SMS providers are used to transmit one-time passwords (OTP) and booking status messages.
6. Legal & Regulatory Compliance: We may disclose information if required to do so by applicable law, statutory subpoena, court order, or formal request from healthcare licensing authorities.
5. Data Security & Encryption
The security of your personal and health information is paramount. MedQ+ employs robust industry-standard safeguards:
Encryption in Transit: All data transmitted between the mobile application/browser and our backend servers is encrypted using modern Transport Layer Security (HTTPS / TLS 1.2+).
Access Controls: Internal access to patient records is strictly restricted using role-based access controls (RBAC). Hospital staff and doctors can access only records belonging to their registered clinic.
Infrastructure Hardening: Databases are hosted in isolated virtual networks with automated security patches, firewalls, and regular backups.
6. Data Retention & Account Deletion
We retain personal data only for as long as necessary to provide you with the MedQ+ service, fulfill healthcare purposes, and comply with legal requirements.
Your Right to Delete Your Account
You have the full right to delete your MedQ+ account and erase your personal data at any time:
In-App Deletion: Navigate to Profile > Danger Zone > Delete Account and follow the confirmation prompts.
Public Web Deletion Page: Visit our dedicated public deletion page without logging in to submit a deletion request:
Go to Account Deletion Page
Data Handling Upon Deletion
Personal Profile: Your name, phone number, email address, profile photo, and active login sessions are erased immediately.
Active Bookings: Any pending or upcoming appointments are cancelled and removed.
Past Clinical & Accounting Records: Past consultation records and queue histories are stripped of all personal identifiers and retained strictly in anonymized form to preserve clinic queue logs and statutory financial records.
7. Children's Privacy
MedQ+ is not intended for independent use by children under the age of 13 (or under 18 in jurisdictions where 18 is the age of majority).
We do not knowingly collect personal information directly from children. If an appointment is booked for a child or dependent minor, the profile must be created, managed, and supervised exclusively by a parent or legal guardian.
8. Your Privacy Rights & Choices
Depending on your jurisdiction, you enjoy the following privacy rights:
Access & Correction: You can view and update your profile name, email, and patient details at any time from the in-app Profile tab.
Permission Revocation: You can revoke Location, Camera, or Microphone permissions at any time through your mobile device's system Settings menu.
Account Deletion: You have the right to request the complete deletion of your account and personal records.
Opt-out of Communications: You may opt out of non-critical notification channels while retaining essential transaction receipts.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect operational changes, new app features, or updated legal and regulatory standards.
When updates are made, we will revise the "Effective Date" at the top of this document. For significant changes, we will provide additional notice within the MedQ+ application or via your registered contact details.
10. Contact Us & Grievance Redressal
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our privacy and compliance team: