Privacy Policy

Medavize, Inc. Privacy Policy

Effective Date: September 28, 2026

Transparency and trust are important to us. Medavize, Inc. respects your privacy and is committed to protecting your personal information.

Please read this Privacy Policy carefully. If any term in this Policy is unacceptable to you, please do not use our website or Services.

For your convenience and reference we have included headings and high level summaries for each section, but please be mindful that these headings and summaries do not affect the interpretation of this Policy.

1. Scope and Overview

This Policy applies to Medavize's website and Services and explains how Medavize handles Personal Data. It does not apply to third-party products, services, websites, applications, or content, which are governed by their own privacy notices.

Medavize, Inc. ("Medavize," "we," "our," or "us") provides digital tools and related services designed to help Caregivers and Care Recipients to organize, understand, and manage health, wellness, medication, appointment, and caregiving information (collectively, the "Services"). The Services may be provided via websites or apps.

In this Policy “you” means any User of our Services.

This Privacy Policy explains how we collect, use, create, disclose, retain, and protect Personal Data when you visit www.medavize.com or use our Services. This Policy is part of the Medavize Terms and Conditions and prevails in case of any conflict related to the subject matter of this Policy. We may provide additional privacy notices and require separate consents to access any part of our Services.

This Policy does not apply to any products, services, websites, mobile applications, or content (including advertising) offered by third parties or that may be linked to or from the Services. Data collected by these third parties is covered by their own privacy notices.

2. Definitions

This section defines Care Recipient, Caregiver, Health Data, Health Data Connection, Personal Data, and User for purposes of this Policy.

Care Recipient: means an individual whose health, wellness, medication, appointment, or care-related information is entered into, connected to, accessed through, or managed using the Services by that individual or by a Caregiver.
Caregiver: any person who has been authorized by a Care Recipient to act for, assist and access the Personal Data of a Care Recipient.
Health Data: information that identifies an individual, or can be used to identify an individual, and relates to the individual's physical or mental health, health status, wellness, healthcare services available to or used by such individual, or to the payment or cost information for healthcare.
Health Data Connection: any interface that enables us to access your Personal Data from external sources, such as (i) electronic health or medical records from healthcare organizations, including pharmacies and laboratories, and (ii) data from third-party health apps and devices (such as wearable devices, fitness trackers, blood pressure monitors and other digitally enabled devices).
Personal Data: information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household, as defined by applicable law, and including Health Data.
User: any individual who accesses our website, creates a Medavize account or otherwise uses the Services, either as a Caregiver or a Care Recipient.

3. Information We Collect

Depending on use of the Services, Medavize may collect identifiers, health and wellness information, user content, account and authentication information, inferences, transaction and subscription information, device data, and employer, health plan, or program eligibility information.

Depending on how you use the Services, we may collect the following categories of Personal Data:

Personal identifiers including name, date of birth, demographic information, email address, telephone number, mailing address, account identifiers, identification numbers and similar information.
Health, medical information and wellness information that you provide to us directly or authorize to be shared with us, including Personal Data and Health Data accessed via a Health Data Connection, Health Data you upload or share with us, and information from authorized third-party health apps and devices. This information may include medications, diagnoses, laboratory results, appointment information, activity or wellness information, device measurements, and other health-related information
User content you elect to share, including information you share directly with us, such as information about symptoms, notes of medical appointments, questions and comments made to our customer service or AI assistance tools, photos, as well as views, opinions and feedback.
Account and authentication information, such as username, credentials, account preferences, permissions, family relationships, and records of account activity.
Inferences that we derive from Personal Data that we collect about you, such as personalized insights, caregiving needs, risk indicators, trends, service preferences, or recommended next steps, to support service delivery, personalize your experience, and improve our Services.
Transaction and subscription information, such as purchase history and billing-related information.
Device data which is any information that we access through permissions with your device’s operating system, including device identifiers, location information, IP address, images captured through your device camera.
Employer, health plan, or program eligibility information, such as claims and insurance information, if you provide the information to us or access to the Services is sponsored or facilitated by an organization.

We collect information (i) from Users, including Care Recipients and Caregivers, when you share information with us or use the Services, (ii) from third parties that you authorize to share information with us, (iii) from devices including your computer, phone, and health and wellness trackers or devices; and (iv) from organizations that sponsor or facilitate your access.

4. How We Collect Your Information

Medavize may collect information automatically through use of the Services, through Health Data Connections with prior express consent, from Care Recipients, Caregivers, and other authorized persons, and from other permitted sources. A User may disconnect a Health Data Connection to stop future collection through that connection.

Automatic collection. When you interact with our Services, including by accessing our website or mobile apps, we and our service providers may automatically collect certain information about your device and your use of our Services, including information about device and browser, location and IP address, network and connection quality, your activity and usage, performance and other digital data. You may limit our access to some data but doing so may limit features or performance of our Services.

Health Data Connection. Subject to your prior express consent, we will collect data via Health Data Connections with third-party organizations and devices. At any time, you may disconnect a specific Health Data Connection that you have previously enabled. Disconnecting a service generally stops future collection through that connection but may not delete information that Medavize previously received.

Information We Collect directly from Care Recipients, Caregivers and other people. As part of using the Service, Caregivers, Care Recipients or other persons authorized by them (such as healthcare professionals), may provide us medical and non-medical information about you.

Information we collect from other sources. We may also receive Personal Data from our affiliates, business partners, service providers, benefits providers, employers or program sponsors, and other third parties where permitted by applicable law. For example, if an employer, health plan, or other organization sponsors or facilitates your access to Medavize, we may receive information necessary to confirm your eligibility for the Services or administer your access. We may also obtain information from publicly available sources where permitted by applicable law.

5. Purposes of Collection and How We Use Data

Medavize uses Personal Data and Health Data to provide and personalize the Services, support care organization and coordination, communicate with Users, perform analytics and research, improve the Services, protect against fraud and security incidents, comply with obligations, and carry out other purposes with prior consent. Medavize may also use and disclose properly de-identified or aggregated information for lawful purposes.

In general, we collect Personal Data to facilitate the care of Care Recipients by (i) developing a centralized repository and summary of the Care Recipient’s health information, (ii) developing personalized insights into the Care Recipient’s health and Caregiver’s needs, (iii) tracking health evolution and promoting progress towards elected health outcomes, (iv) facilitating healthcare decisions, including by providing you alternatives for health services and ways to optimize your healthcare budget, and (v) helping to coordinate or facilitate care by Caregivers.

We therefore use your Personal Data, including your Health Data to:

Personalize and provide the Services to you, including to process transactions requested by you,
Provide customer service and technical support, and respond to complaints and privacy rights request,
Send you various communications, including on benefits, features and Services,
Evaluate performance of various services and user behavior or perform analytics and research,
Respond to your comments and questions,
Provide, maintain, and improve our platform and Services, including to evaluate and improve artificial intelligence features using only de-identified or aggregated information.
Protect against fraud, abuse, security incidents and unlawful activity,
Comply with our contractual and legal obligations and enforce our policies, and
Other purposes, subject to your prior consent.

Medavize may create information that has been aggregated or de-identified so that it is not reasonably capable of being associated with an identified or identifiable individual, subject to applicable law. Medavize may use and disclose properly de-identified or aggregated information for any lawful purpose.

6. How We Share Information

Medavize may share Personal Data with prior consent to provide the Services and may also disclose Personal Data without prior express consent to service providers, in response to valid legal process, in disputes, or in connection with a business transaction. Medavize may also disclose information at a User's direction or consent or as disclosed when the information is collected.

With your prior consent, we may share your Personal Data for purposes of providing the Services, such as with Care Recipients, Caregivers, Users or authorized third parties such as medical providers, insurance companies, health organizations and pharmacies.

We do not sell or trade your Personal Data to third parties without your prior express consent.

However, we may share your Personal Data with third parties without your prior express consent for legitimate business purposes, such as:

To third-party service providers (technology providers and others) for the purpose of maintaining and operating our Services and platforms;
To respond to valid court orders, subpoena, search warrants or other requests from a regulatory authority. In these cases, we will attempt to (i) limit the extent of disclosures, (ii) notify you, unless we are prevented from doing so, (iii) preserve the confidentiality of any Personal Data we disclose, including by seeking protective orders, and (iv) maintain a record of such disclosures;
As part of any dispute which may arise with you, including through a mediation, judicial or arbitral proceeding;
To support a business transaction – for example, if Medavize is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

Medavize may also disclose information with your direction or consent or as otherwise disclosed at the time information is collected.

7. Care Recipients, Caregivers, and Information About Other People

The Services may allow Users to provide, connect, manage, or share information about Care Recipients, Caregivers, or other people. Users are responsible for selecting appropriate people and permissions and, when providing another person's Personal Data, must have the required legal authority, permission, or lawful basis.

The Services may allow a User to provide, connect, manage, or share information about a Care Recipient, Caregiver or other persons.

Users are responsible for selecting appropriate people and permissions. Revoking a person's access generally stops future access through the applicable Medavize account but may not delete information previously received, downloaded, or independently retained by that person.

If you provide Personal Data about another person, you represent that you have the legal authority, permission, or other lawful basis required to provide that information to Medavize and to authorize Medavize to use and disclose it as described in this Privacy Policy and through the permissions you select in the Services.

To protect your Personal Data, do not share your Medavize user credentials with others. If you share your credentials with any other person, we consider that this person is fully authorized to act on your behalf and you are responsible for the actions of these persons.

8. Managing Your Personal Data and Consents

Users may delete their personal health record without closing their account, request deletion of all Personal Data subject to stated limitations, request correction of inaccurate information, obtain a copy of their Personal Data, withdraw certain consents, and opt out of marketing communications.

Medavize allows you to control your Personal Data in compliance with applicable laws.

Data deletion. Through the account center, you may delete your Medavize account at any time and this will result in an account closure. You may also request to delete all your Personal Data by sending a request to inquiries@medavize.com, in which case we shall proceed to do so, subject to our legal and contractual obligations, and also close your account. We will execute your request within 30 days or less, if required by applicable laws. Note that we may retain your Personal Data to resolve a dispute with you or otherwise comply with or enforce legal obligations.
Correct inaccurate information. Contact us at inquiries@medavize.com if you would like to correct any inaccurate Personal Data. Keep in mind that if we received the data through a third-party, you may be required to request the correction through the original data source.
Receive a copy of your information. You may request a copy of all your Personal Data by emailing us at inquiries@medavize.com with the subject line “Data Request” and explaining you would like a copy of your Personal Data.
Withdraw consent. You may withdraw the consent given to us to collect your Personal Data from a third-party in (i) the Medavize account center for any connected service, or (ii) the third-party that provides the information to us. Further, the Medavize account center allows you to withdraw consent given to us to share data with certain third parties.
Opt out of marketing communications by sending us an email at inquiries@medavize.com.

9. Minors

Medavize accounts are intended for individuals who are at least 18 years old.

Medavize accounts are intended for individuals who are at least 18 years old. We do not knowingly market, solicit or collect Personal Data from minors under 18. If we obtain actual knowledge of a violation of this provision, we will take reasonable efforts to disable the relevant account(s).

10. Artificial Intelligence and Automated Features

Certain Services may use AI or other automated tools to organize information, generate summaries, identify trends, provide reminders or alerts, answer questions, or generate educational or caregiving insights. When third-party technology providers support these features, Medavize will seek appropriate contractual and technical restrictions.

Certain Services may use Artificial Intelligence (AI) or other automated tools to organize information, generate summaries, identify trends, provide reminders or alerts, answer questions, or generate educational or caregiving insights.

When Medavize uses third-party technology providers to support AI or automated features, Medavize will seek to impose contractual and technical restrictions appropriate to the sensitivity of the information and the services provided.

Medavize does not use identifiable Health Data or Personal Data to train general-purpose third-party AI models. The results from AI models or features are informational only and are not a substitute for professional medical advice, diagnosis or treatment. The AI service may proactively deliver alerts, if permitted by you; it does not autonomously make, alter, or execute clinical decisions or coverage determinations.

11. Communications and Marketing

Medavize may send administrative, transactional, security, service, health-related, or caregiving communications by email, text message, or in-app push notification. Promotional communications may also be sent, and Users may opt out of marketing emails or SMS messages through the stated methods.

Medavize may send administrative, transactional, security, service, health-related, or caregiving communications that are necessary or useful to provide the Services via email, text message and in-app push notifications. These communications are different from promotional marketing and may continue even if you opt out of marketing messages.

You may select your communications preferences in the Medavize app. You give us permission to communicate with you in accordance to your preferences and accept full responsibility for Personal Data disclosures made pursuant to your preferences.

If you choose to receive promotional communications, Medavize may send product announcements, surveys, educational content, news, and early-access invitations. You may opt out of marketing emails using the unsubscribe link and opt out of marketing SMS messages by replying STOP, where applicable.

12. Cookies, Analytics, and Tracking Technologies

Medavize and its service providers may use cookies, pixels, local storage, mobile identifiers, SDKs, analytics tools, crash-reporting technologies, and similar technologies to operate, secure, monitor, understand, and improve the Services.

Medavize and its service providers may use cookies, pixels, local storage, mobile identifiers, software development kits (SDKs), analytics tools, crash-reporting technologies, and similar technologies to operate the Services, remember preferences, authenticate users, maintain security, diagnose problems, understand usage, and improve performance. Medavize honors Global Privacy Control and other legally required opt-out signals.

Medavize will provide additional information about the tracking technologies it uses, their purposes, and available controls in a Tracking Technologies or Cookie Notice where appropriate. Browser or device settings may allow you to block or delete certain technologies, although doing so may affect functionality.

Medavize does not permit advertising or tracking technologies to receive identifiable Health Data or Personal Data from authenticated or health-information pages unless the disclosure is specifically evaluated, legally permitted, and appropriately authorized.

Please note that we do not control, and this Policy does not cover, third-party advertising networks, web analytics companies and social media platforms that may, independently and separate of us, track your online activities over multiple websites and mobile app platforms.

Also, our Services may contain links to third-party websites, products or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information to them.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, web beacons, local storage, software development kits ("SDKs"), and similar technologies to operate and secure our website and Services, remember your preferences, understand how our website and Services are used, measure performance, diagnose technical issues, and improve the user experience.

Some of these technologies are necessary to operate, authenticate, secure, debug, or maintain our website and Services and therefore may not be disabled through our cookie preference tools. Other technologies, such as certain analytics or performance technologies, may be subject to your choices where required by applicable law.

If you would like more information about available cookies and tracking choices, including how Medavize responds to applicable opt-out preference signals, please email us at inquiries@medavize.com with the subject line “Tracking Choices” and details about your request.

Analytics, Performance, and Monitoring Tools

We use PostHog to help us understand how users interact with our website and Services, improve user experience, measure feature usage, and troubleshoot issues. PostHog may collect information such as pages visited, features used, links or buttons selected, session activity, device and browser information, operating system, IP address, and timestamps. Some of this information may be associated with your account, device, or other identifiers.

You may be able to prevent or limit the use of certain analytics and performance technologies through our cookie preference tool, where available, or through browser or device settings. Certain technologies used for security, fraud prevention, authentication, debugging, or essential service operation may not be subject to these choices.

Because our Services may involve health-related information, Medavize takes additional measures designed to limit the information disclosed through analytics and tracking technologies. We do not intentionally configure analytics or tracking technologies to collect Protected Health Information ("PHI") or identifiable Health Data except where the collection is necessary to provide the Services, permitted by applicable law, and subject to appropriate safeguards and contractual restrictions.

13. Data Security

Medavize uses administrative, technical, and physical safeguards designed to protect Personal Data, including the controls listed in this section. No security measure can guarantee absolute security, and Medavize will provide breach notification in accordance with applicable law when required.

Medavize uses administrative, technical, and physical safeguards designed to protect Personal Data appropriate to the sensitivity of the information and the nature of the Services. These safeguards include encryption, access controls, authentication, logging and monitoring, secure development practices, vulnerability management, backups, incident-response procedures, vendor risk management, workforce training, and other controls.

No method of transmission, storage, or security control can guarantee absolute security. You are responsible for protecting your credentials and notifying Medavize promptly if you believe your account or information has been compromised.

If we believe that your Personal Data may have been breached, we will notify you in accordance with applicable law.

14. Data Retention and Deletion

Medavize retains Personal Data for periods reasonably necessary for the purposes described in this section. When information is no longer required, Medavize will delete, anonymize, or de-identify it in accordance with applicable retention procedures, subject to the stated limitations and exceptions.

Medavize retains Personal Data for the period reasonably necessary to provide the Services, maintain accounts, fulfill the purposes described in this Policy, protect security and prevent fraud, comply with law and contractual obligations, resolve disputes, enforce agreements, and maintain appropriate business and audit records.

Retention periods may vary by category and context. Factors may include the sensitivity of the information, the purpose for which it was collected, whether an account remains active, legal or contractual retention requirements, customer instructions, security needs, and the feasibility of deletion from backup or archival systems.

When information is no longer required, Medavize will delete, anonymize, or de-identify it in accordance with applicable retention procedures.

Deletion requests may not result in immediate deletion from backups, security logs, legal holds, records Medavize must retain, information controlled by another organization, or information previously disclosed at your direction.

15. International Users and Data Transfers

Third-party websites, applications, or services linked from the Services are governed by their own privacy practices. Health Data Connections that exchange information with Medavize at a User's direction are addressed separately in Section 4.

Medavize’s system and platforms are located in the United States and our data processing takes place in the United States. We may contract with third-party services who may access Personal Data outside of the United States.

If you access our Services from outside the United States, you assume responsibility for all transfers of Personal Data to the US and acknowledge and agree that any Personal Data you submit to Medavize will be stored and processed in the United States.

16. Third-Party Websites

The Services may contain links to websites, applications, or services operated by third parties that are not controlled by Medavize. This Policy does not govern the independent privacy practices of those third parties. Review their privacy policies before providing information to them.

This section does not describe Health Data Connections that exchange information with Medavize at your direction; those connections are addressed in Section 4.

17. Changes to This Privacy Policy

Medavize may change this Policy or provide supplementary notices for specific features. Medavize states that it will notify Users of changes and provide up to 30 days' notice before material changes become effective; Users who do not agree should stop using the Services and close their account.

Medavize may, at any time, change this Policy or provide you supplementary notices that apply to specific features. We will notify you of any such change in accordance with your communication preferences.

If we make material changes, we will provide you up to 30 days notice before the changes become effective.

If you do not agree to a change to this Policy, please cease using the Services and close your account. Your ongoing use of the Services will be deemed an acceptance of any change.

18. Contact Us and Privacy Requests

Users may contact Medavize with questions, complaints, or requests concerning this Policy or their Personal Data.

For questions, complaints, or requests concerning this Privacy Policy or your Personal Data, contact:

Medavize, Inc.
Website: https://www.medavize.com
Email: inquiries@medavize.com (subject line: PRIVACY POLICY)

If your request concerns information Medavize processes on behalf of a healthcare provider, health plan, employer, or other customer, we may direct you to that organization or coordinate with it as required by law and contract.

Medavize will not retaliate or discriminate against you for making a good-faith privacy complaint or exercising a privacy right protected by applicable law.