Legal

Privacy Policy

Last updated: September 1, 2026

Your health information belongs to you

MDcipher is a secure platform for managing your personal health records — your medical history, medications, test results, health logs, and documents. This policy explains what information we collect, how we use and protect it, and the choices you have. It applies to the MDcipher application and the accounts and profiles you create in it.

HIPAA compliance

MDcipher is built to comply with the Health Insurance Portability and Accountability Act (HIPAA). We apply administrative, technical, and physical safeguards designed to protect your health information, and we work with infrastructure and service providers under Business Associate Agreements that hold them to the same standard when they handle protected health information on our behalf.

Where MDcipher operates

MDcipher is offered to, and intended for use by, individuals located in the United States. We do not knowingly offer the service to, or collect health information from, individuals located outside the United States, and we do not transfer health information internationally.

Information we collect

We collect only what the service needs to work:

• Account information — your name and email address from the sign-in service (Microsoft Entra) and your language preference.
• Health records you add — diagnoses, medications, procedures, test results, health logs, allergies, immunizations, and notes you enter, documents you upload, and records you import from a connected patient portal.
• Profile information — names and dates of birth for the profiles on your account, used to verify that imported records belong to the right person.
• Billing information — subscription status handled through our payment processor, Stripe. We never see or store your full card number.
• Access records — an audit trail of when health information in your account is viewed or changed, kept as a security and compliance safeguard.

How we use your information

Your information is used to operate MDcipher for you: storing and organizing your records, verifying that imported records match the intended profile, and — if you use them — powering the AI features that help you log, import, and understand your records. AI features process your records only to fulfill the request you make; your health information is not used to build advertising profiles or to train third-party models.

What we never do

• We never sell your personal or health information. To anyone. Ever.
• We never share your health information with advertisers.
• We never disclose your health information to third parties without your consent, except where the law requires it.

How we protect your data

• All data is encrypted in transit (TLS) and encrypted at rest.
• Credentials for connected patient portals are additionally encrypted with AES-256-GCM before storage.
• Data is hosted on Microsoft Azure infrastructure that supports HIPAA workloads.
• Every access to health information in your account is written to an audit log.
• Access to your records requires your sign-in — we have no password to lose; authentication is handled by Microsoft Entra.

Data retention and deletion

We keep your records for as long as your account is active so they are there when you need them. You can delete an individual profile or your entire account at any time from within the app; deletion permanently removes the associated health records from our systems.

Audit-log entries and records of consent are retained for six years for security and compliance reasons, consistent with HIPAA’s enforcement window, even after your account or health records are deleted.

Full instructions, including how to request deletion if you can no longer sign in, are on our account deletion page.

Your rights

You can access, correct, export, and delete your information at any time. Your records are shown in full in the app, chat history can be exported, and account deletion is available directly in your account settings — no support ticket required.

Children's privacy

MDcipher accounts are for adults. A parent or legal guardian may maintain a profile for a child or dependent under their own account after attesting that they are authorized to manage that person's health information.

Cookies

MDcipher uses a small number of cookies needed to run the service: a session cookie to keep you signed in, a cookie that records your acceptance of the login disclaimer, and a cookie that remembers which profile is active. These are functional cookies required for the app to work; we do not use advertising or tracking cookies. You can control cookies through your browser settings, though blocking the functional cookies above will prevent you from signing in or using the app.

Changes to this policy

If we make material changes to this policy, we will update the date above and notify you in the app before the changes take effect.

Contact

Questions about privacy or this policy? Contact us at support@mdcipher.app. This policy is issued by MDcipher, LLC, a Pennsylvania limited liability company, 82 Rock Haven Ct, Reading, PA 19606-8942.

MDcipher is for informational purposes only and does not provide medical advice.