Privacy Policy

🏢1. Who We Are & What This Covers

MedSync Pro ("we", "us", "our") is a Pakistan-based healthcare technology company. This Privacy Policy applies to all software products published by MedSync Pro, namely:

• PharmacyKPIs — hospital pharmacy performance portal (pharmacykpis.medsyncpro.org)
• VetAssist — multi-species veterinary diagnostic system (vet.medsyncpro.org)
• RxCheck — drug interaction checker (Android app)
• Digital Formulary — hospital formulary generator (formularygenerator.medsyncpro.org)
• MedRemind PK — medication reminder app (Android app)
• RxSmart — pharmacy point-of-sale system (desktop software)
• StockPulse — pharmacy stock and inventory management app

It also covers this website, medsyncpro.org. By using any of our products you agree to this policy.

📦2. Data We Collect

Our products store business and clinical data entered by you — such as inventory records, sales, purchases, prescriptions, KPI figures, and reports — solely so the software can perform its function for you.

We do not collect personal information beyond what is necessary to provide each service. We do not harvest device contacts, track your location, display advertising, or access anything on your device outside each app's own data.

☁️3. Google Drive Integration & Google User Data

Some of our products (currently StockPulse and RxSmart) offer an optional integration with Google Drive so you can back up your own business data to your own Google account.

Scope of access

• We request the drive.file scope only. This grants access exclusively to files created by our application.
• We only create, update, and restore backup files that our app itself generated in your Drive.
• We never read, browse, modify, or delete any other files in your Google Drive. The scope we use makes this technically impossible.
• Backup files reside entirely in your own Google account — they are never copied to, stored on, or processed by MedSync Pro servers.

How Google user data is used

• Google user data is used solely to provide the user-facing backup and restore feature you explicitly initiate.
• We do not use Google user data for advertising, marketing, profiling, or model training.
• We do not sell Google user data or transfer it to any third party, except as necessary to provide the feature you requested, to comply with applicable law, or as part of a merger or acquisition with prior notice to users.
• No humans read your Google Drive data. Access is programmatic only, limited to the app's own backup files, and only when you trigger a backup or restore.
• The integration is entirely optional. Every product functions fully without connecting Google Drive, and you can disconnect access at any time from your Google Account permissions page.

🤖4. AI Processing (VetAssist)

VetAssist includes an optional AI-assisted diagnosis feature. When you use it, the case details you enter (species, symptoms, clinical findings) are transmitted securely to our AI service provider (Anthropic) solely to generate the diagnostic suggestion you requested.

• Case data sent for AI processing contains no owner names or contact details unless you type them into the case notes yourself — we recommend you do not.
• AI-processed data is used only to return your result. It is not used for advertising and is not sold.
• Google Drive data is never sent to any AI model.

📊5. Anonymous Usage Statistics (RxCheck)

RxCheck may collect anonymous, aggregate usage statistics — profession, city, and app-activity timestamps — identified only by a random device-generated ID. We do not collect names or phone numbers through RxCheck. These statistics help us understand adoption and improve the product, and may be displayed publicly only in aggregate form (e.g., "used by 1,200+ pharmacists").

🔑6. Account Data (PharmacyKPIs)

PharmacyKPIs uses role-based logins for hospital staff. We store the account credentials (username and a securely hashed password) and role assignments needed to operate these accounts. Account data is used only for authentication and access control within the platform.

💊7. On-Device Health Data (MedRemind PK)

MedRemind PK stores medication schedules, adherence history, and vitals entirely on your own device. This health data is never uploaded to MedSync Pro servers — we cannot see it. Caregiver SMS alerts are sent directly from the user's own SIM to the caregiver number the user configures; these messages do not pass through our servers.

💳8. Payments (RxSmart)

RxSmart subscriptions are settled through standard payment channels (e.g., bank transfer or mobile wallet). We retain basic billing records (pharmacy name, plan, payment date) required for accounting. We do not store card numbers or wallet credentials.

✉️9. Website Contact Form

The contact form on medsyncpro.org is processed by FormSubmit, a form-delivery service, which relays your name, email address, and message to our support inbox. This information is used only to respond to your enquiry.

🔒10. Data Sharing & Security

We do not sell, rent, share, or transfer user data to third parties for their own purposes. The only third-party processors we use are those named in this policy (Google Drive — at your request; Anthropic — for AI features you invoke; FormSubmit — for the website contact form), each receiving only the minimum data required for its function.

All data in transit between our apps and servers is encrypted using HTTPS/TLS. Access to production systems is restricted to authorised personnel.

🗑️11. Data Retention & Deletion

• Google Drive backups: stored in your own account; delete them yourself at any time from Google Drive, or revoke our app's access from your Google Account permissions page.
• On-device data (RxCheck, MedRemind PK): deleted by clearing app data or uninstalling.
• Server-side data (PharmacyKPIs accounts, RxSmart billing records, anonymous statistics): retained while your account or subscription is active. To request deletion, email us and we will action it within 30 days.

🧒12. Children's Privacy

Our products are professional tools intended for healthcare practitioners, pharmacy staff, and adult caregivers. They are not directed at children under 13, and we do not knowingly collect data from children.

📝13. Changes to This Policy

If we update this policy, the new version will be posted at this page with a revised "Last updated" date. Material changes affecting Google user data handling will be communicated within the relevant product before taking effect.