Effective date: August 8, 2026
MedsBuddy Privacy Policy
Last updated: September 11, 2026
This Privacy Policy explains how ("MedsBuddy," "we," "us," or "our") collects, uses, discloses, retains, and protects information when you use the MedsBuddy mobile application, website, support services, and related features.
MedsBuddy is designed to help adults organize information for medical appointments, maintain medication and symptom information, prepare questions, and use optional AI-assisted features. MedsBuddy is not a healthcare provider and does not provide medical advice, diagnosis, treatment, prescribing, or emergency services.
1. Who Operates MedsBuddy
MedsBuddy is operated by Astra AI Soft, Inc. For privacy questions or requests, contact support@medsbuddy.app.
2. Information We Collect
Depending on the features you use, we may collect account and profile information, health and visit information you choose to provide, audio or image information for AI features, usage and diagnostic information, and medication query details sent to public medication databases.
Health and visit information may include reasons for a visit, symptoms, concerns, allergies, questions, notes, medication names, strengths, dosage forms, schedules, consent records, transcripts, visit summaries, and follow-up items you choose to save.
Saved health and visit information is associated with your MedsBuddy account. We use your account identifier to store and retrieve your records and sync supported information when you sign in on supported devices. This information is linked to you and is not anonymous.
3. How We Use Information
We use information to create, authenticate, secure, and support your account; provide medication, symptom, visit-preparation, transcription and summary features; process AI-assisted requests; sync supported devices; respond to support and privacy requests; detect abuse; troubleshoot errors; and comply with legal obligations.
We do not use MedsBuddy health information to make eligibility decisions for employment, insurance, credit, housing, or similar purposes.
4. AI-Assisted Features
Some MedsBuddy features use artificial intelligence to organize user-provided information, extract medication-label details, transcribe audio, generate drafts, or prepare visit summaries. AI output can be incomplete or incorrect. Confirm medication information and medical instructions with a licensed clinician or pharmacist.
Before sending information to Microsoft Azure OpenAI Service, MedsBuddy displays an in-app disclosure and asks for your explicit agreement. Depending on the AI feature, information sent includes live voice audio, messages, relevant medications, symptoms and preparation notes, and visit transcripts used to generate summaries. These services provide voice assistance, transcription, and AI-generated responses and summaries.
Your agreement is remembered for your account. You can withdraw it at any time under Settings → Security & Privacy → AI Data Sharing. Withdrawing immediately ends any active voice session and stops MedsBuddy from sending anything further to Microsoft Azure OpenAI Service. It does not automatically delete previously saved records or information already processed by service providers. AI features require your agreement again before they can be used.
5. How We Disclose Information
Google Cloud and Firebase provide hosting, account-linked data storage, and authentication. Microsoft Azure OpenAI Service processes the information described above for AI and voice features. Medication lookups send medication search terms to RxNorm and openFDA.
Microsoft processing is governed by its applicable Product Terms and Data Protection Addendum. Microsoft states that prompts and outputs are not available to other customers or OpenAI, and are not used to train generative AI foundation models without permission or instruction. Processing can also include safety and abuse monitoring under the applicable service configuration. See Microsoft's AI data privacy and retention documentation.
Google Cloud processing is subject to its applicable Cloud Data Processing Addendum. We require service providers handling personal information on our behalf to provide the same or equal protection described in this policy through applicable contractual obligations and safeguards.
We may also disclose information at your direction, for legal and safety reasons, or as part of a business transaction. We do not sell personal or health information to data brokers, and we do not use health information for cross-context behavioral or targeted advertising.
6. Visit Consent and Recordings
Laws governing recording, transcription, and consent vary by location. Before activating a visit-listening feature, you must obtain all consent required from the patient, clinician, and any other participant. Do not use the feature where recording or transcription is prohibited.
7. Retention
We retain information only for as long as reasonably necessary to provide the Services, comply with law, resolve disputes, and maintain security. AI-generated visit summaries are retained until you delete them or your account, unless a longer period is legally required.
Live voice audio is streamed to Microsoft Azure OpenAI Service for processing. MedsBuddy does not save raw audio recordings in the app or its application database. Saved transcripts, summaries, and health information are separate records associated with your account.
Attachments are stored on your device. Removing an attachment deletes the app's saved copy, without deleting your original file.
Service-provider retention is separate from storage in MedsBuddy. Microsoft may retain information for stateful features and abuse monitoring, depending on the service configuration and applicable terms. Deleting a MedsBuddy record does not automatically delete provider-retained information. See the Microsoft documentation linked above for details.
8. Your Choices and Rights
Depending on your location and applicable law, you may have rights to access, correct, delete, export, object to, or restrict certain processing of information associated with your account. Submit privacy requests through the in-app controls after signing in. If you cannot access your account, visit the account deletion page for support options.
9. Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, authentication, provider-supported encryption in transit and at rest, secret management, logging controls, backups, and security monitoring. No system is completely secure.
10. Health Privacy and HIPAA
MedsBuddy is currently intended as a consumer-directed health-support application. Unless we expressly state otherwise in a separate written agreement, MedsBuddy is not provided by or on behalf of your doctor, hospital, health plan, or another HIPAA-covered entity. Information you provide directly to MedsBuddy may not be protected by HIPAA in the same way as information maintained by a healthcare provider.
11. Health-Information Incidents
We maintain processes to investigate suspected unauthorized access, acquisition, use, or disclosure of health information. If an incident requires notification under applicable law, we will provide notices to affected individuals and regulators as required.
12. Children
The Services are intended for adults age 18 and older. We do not knowingly permit children under 18 to create independent accounts or intentionally collect their information through the Services.
13. Notifications (Upcoming Feature)
Notifications are an upcoming feature and are not yet available. When available, you will be able to choose whether to enable reminders and manage notification permissions in your device settings. We will update this policy to reflect the feature's data practices when it launches.
14. Website Cookies
The MedsBuddy website may use cookies or similar technologies necessary for security, preferences, and basic operation. If analytics, advertising, or non-essential cookies are added, we will update this policy and provide any consent controls required by law.
15. International Use
The Services are initially intended for users in the United States. Information may be processed in the United States or other locations where our service providers operate.
16. Changes to This Policy
We may update this Privacy Policy as the Services, providers, or legal requirements change. We will post the updated policy with a revised Last updated date and provide additional notice when required by law.
17. Contact Us
For privacy questions, requests, or complaints, contact support@medsbuddy.app. Do not send unnecessary medical information by email.