Privacy Policy

This policy explains what Med and Tonic stores, why, and the choices you have. Med and Tonic is intended for clinicians and trainees recording cases for learning and documentation.

Do not enter patient identifiers

Record cases without names, ID numbers, phone numbers, addresses, photos of faces or anything else that identifies a patient. You are responsible for following your hospital's rules and the data protection law that applies to you.

What we store

• Account: your name, email and sign-in details (handled by our sign-in provider, Clerk).
• Your cases: the text, voice recordings, images and documents you add, and the notes and presentations created from them.
• Usage: basic records of AI use (which model, how many tokens) to manage cost and limits.

How it is used

• To run the app for you: structure your cases, keep your logbook and build presentations.
• Case content is sent to Google's Gemini AI service (or, as a backup, to Gemini through OpenRouter) to be transcribed and structured. It is not used by Med and Tonic for advertising and is never sold.
• We do not show your cases to anyone else unless you create a share link yourself.

Where it is kept

Data is stored with Supabase (database, European Union region) and Cloudflare R2 (files), encrypted in transit and at rest. The site is served through Cloudflare.

Your choices

• You can edit or delete any case at any time.
• You can ask for a copy of your data or for your account to be deleted by emailing mohabanwar1@gmail.com.
• If you are in the EU or UK, you have rights under the GDPR, including access, correction, deletion and objection.

Cookies

We use only the cookies needed to keep you signed in and remember your settings. There are no advertising cookies.

Changes

If this policy changes, the date at the top will change. Significant changes will be shown in the app.

Contact

Privacy questions: mohabanwar1@gmail.com.