Scope of this policy
"Consumer health data" means personal information that identifies or can reasonably be linked to a consumer and identifies past, present, or future physical or mental health, healthcare, treatment, medication, or efforts to obtain care.
MyDocDay is offered directly to consumers as an organizational tool. It is not a healthcare provider, health plan, pharmacy, medical-record system, or emergency service. Health information in a direct-to-consumer app may not be protected by HIPAA in the same way as information maintained by your doctor or health plan, although other privacy and breach-notification laws may apply.
Categories we collect and why
Provider and care-cadence information
Provider and clinic names, specialties, contact details, locations, expected visit months, care cadence, and scheduling status. We use this data to maintain your care directory and create the scheduling guidance you request.
Appointment information
Appointment titles, providers, dates, times, time zones, types, locations, notes, recurrence, preparation details, status, and rescheduling links. We use this data to organize visits, show upcoming and past care, and generate user-requested reminders and follow-through.
Appointment-review and follow-up information
Whether a visit occurred, was cancelled, or was rescheduled; review status; snooze choices; post-visit notes; and action items. We use this data to support the post-appointment review flow and connect next steps to the correct person and visit.
Medication information
Medication name, strength, form, user-entered instructions, status, start and end dates, notes, cadence, days, and reminder times. We use this data only to organize the medication information and reminders the user chooses to enter.
Health Actions and reminders
Health Action titles, descriptions, providers, due dates and times, completion status, expected-care dates, and links to source appointments or care schedules. We use this data to display, generate, group, and track organizational next steps.
Family and dependent care information
Names, relationships, optional profile images, and assigned providers, appointments, medications, reviews, and Health Actions for people whose care the account holder is authorized to support. We use this data to keep records separated and filter the app by person.
Notification and device information
Notification preferences, time zone, device platform and name, push token, scheduled notification content, delivery status, and read status. We use this data to schedule and deliver notifications that the user enables.
Sources of consumer health data
- Information you enter, upload, or select in MyDocDay.
- Information an authorized account holder enters about a family member or dependent.
- Your device, such as its time zone, notification platform, permission state, and push token when notifications are enabled.
- Information MyDocDay derives from your entries, such as due dates, expected-care dates, recurring-care windows, appointment-review eligibility, and generated Health Actions.
- Technical systems that report whether a notification or product request was processed successfully.
MyDocDay does not currently import medical records, prescriptions, diagnoses, or test results from healthcare providers, pharmacies, insurers, or electronic health record systems.
How we use consumer health data
- Provide the features and views you request.
- Associate records with you or the family member you select.
- Calculate organizational dates, care windows, and reminder timing from the information you provide.
- Create and display appointment reviews and related Health Actions.
- Deliver notifications you enable.
- Secure, maintain, troubleshoot, and improve the service.
- Respond to support, privacy, access, correction, and deletion requests.
- Comply with applicable legal obligations.
MyDocDay does not use consumer health data to diagnose, prescribe, recommend treatment, evaluate medication safety, determine medical urgency, or make clinical decisions.
Disclosures and recipients
We disclose consumer health data only as needed to provide a feature you request, operate and secure MyDocDay, comply with law, or complete a transaction involving the service. We do not sell consumer health data and do not use it for targeted advertising.
The current categories of recipients are:
- Vercel: application and API hosting, private profile-image storage, operational request processing, and website analytics.
- Neon: managed PostgreSQL database hosting for account and care records.
- Expo: push-token registration, push delivery, and delivery receipts when mobile notifications are enabled. Pushes use general wording by default. If you choose detailed notification messages, the title and message sent through Expo may include the care details shown on your lock screen.
- Services you direct us to use: a maps, calendar, email, phone, or browser application receives the information needed for an action only when you initiate it.
- Legal, safety, and transaction recipients:government authorities, professional advisers, or transaction counterparties when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or evaluate a merger, financing, acquisition, or sale.
MyDocDay has no affiliates with which it currently shares consumer health data. Service providers are instructed to process information for the services they provide to MyDocDay.
Your consumer health data rights
Depending on where you live and subject to applicable exceptions, you may have the right to:
- Confirm whether we collect, share, or sell your consumer health data and access that data.
- Receive a list of third parties and affiliates, if any, with whom your consumer health data was shared or sold.
- Withdraw consent from future collection or sharing.
- Request deletion of consumer health data held by MyDocDay and, where required, request deletion by relevant service providers.
- Appeal our refusal to act on a request.
We will not unlawfully discriminate against you for exercising a privacy right. Withdrawing consent or deleting information needed to provide MyDocDay may require closing your account or disabling the affected feature.
Exercise your rights or appeal a decision
Email contact@mydocday.com from the address associated with your account and describe the right you want to exercise. We may request information needed to verify your identity and authority over the account or data.
To appeal a denied request, reply to our decision or email the same address with the subject "Privacy Request Appeal" and explain why you believe the decision should be reconsidered. We will respond as required by applicable law.
Security and deletion
We use reasonable administrative, technical, and organizational safeguards designed to protect consumer health data, including authenticated access, password hashing, private image storage, encrypted network connections, and account-scoped database requests. No storage or transmission method is completely secure.
Verified deletion requests cover the account and associated care data unless limited retention is legally permitted or required. Protected backups and logs may retain limited copies temporarily until they are overwritten through ordinary retention cycles.
Changes to this policy
We will update this policy when our consumer health data practices change. If we seek to collect, use, or share additional categories of consumer health data or use existing data for materially different purposes, we will provide the disclosures and obtain the consent required by applicable law before doing so.
Contact us
Questions about this policy can be sent to contact@mydocday.com.