Your care information deserves careful handling.

MyDocDay is a direct-to-consumer health organization and follow-through tool. It helps you keep appointments, providers, clinics, medications, post-visit reviews, notes, health actions, reminders, and family care responsibilities connected so you can understand what needs attention next. MyDocDay is not a healthcare provider, health plan, pharmacy, medical-record system, or emergency service.

MyDocDay is currently offered directly to individuals, not on behalf of a healthcare provider or health plan. Information stored in a direct-to-consumer health application may not receive the same HIPAA protections as information held by your doctor or health plan. If our role or legal obligations change, we will update this statement.

We collect information that you provide, including:

• Account and profile details such as your name, email address, password, city, state, and optional profile image.
• Care-directory information such as provider and clinic names, specialties, phone numbers, and locations.
• Appointment information such as titles, providers, dates, times, time zones, appointment types, locations, recurrence, preparation details, rescheduling links, and notes.
• Appointment-review information such as whether a visit occurred, was cancelled, or was rescheduled; review and snooze status; replacement appointments; and post-visit action items.
• Health-action and reminder information such as titles, reasons, due dates, due times, notes, completion status, and related appointments or providers.
• Medication information you choose to enter, such as medication names, schedules, notes, reminder settings, and related providers.
• Information you choose to enter about children, dependents, or other family members whose care you help organize, including an optional profile image you select for them.
• Notification information such as your notification preferences, time zone, device platform and name, push token, notification history, read status, and delivery results when notifications are enabled.
• Messages and information you send when you contact MyDocDay for support, privacy questions, or deletion requests.

Passwords are transformed into password hashes before storage. We do not store your password in readable form.

When you use MyDocDay, our hosting, security, and analytics systems may process technical information such as your IP address, browser or device type, operating system, pages viewed, general location derived from an IP address, request timestamps, and application interactions. We use this information to operate, secure, diagnose, and improve the service.

We use session identifiers to keep you signed in. Web sessions use a secure HTTP-only cookie, and the mobile application uses a session token stored on the device. Sessions currently expire after 30 days unless they are ended sooner.

The mobile app may store your app-lock PIN, selected family filter, dashboard order, and certain notification preferences in protected device storage. The app-lock PIN is used locally on that device and is not sent to MyDocDay's servers. An app lock adds privacy on a shared device but does not replace the device passcode or protect an already compromised device.

Some mobile features may ask for device permission when you choose to use them. For example, MyDocDay may request access to your photo library to select a profile image, your calendar to add an appointment, or notifications to deliver reminders. You can manage these permissions through your device settings.

When you choose to open an appointment location in a maps application or add an appointment to an outside calendar, the location or appointment information is sent to the service you selected. That service handles the information under its own terms and privacy practices.

Notification messages use general wording by default. If you choose to show detailed reminder messages, medication, appointment, provider, Health Action, or family-member details may be transmitted through the push-notification provider and displayed on your device lock screen where other people with physical access may see them. You can change this preference or disable notifications through MyDocDay and your device settings.

We use information to:

• Create, authenticate, and maintain your account.
• Provide the healthcare organization and follow-through features you request.
• Display, prioritize, and connect appointments, providers, notes, appointment reviews, health actions, reminders, medication schedules, and family care information.
• Calculate organizational due dates and expected-care windows and generate Health Actions from the care cadence, recurrence, and post-visit details you provide.
• Deliver notifications you enable and update their timing when you change or complete a related health action.
• Respond to support, privacy, and account requests.
• Protect MyDocDay and its users from misuse or security threats.
• Understand reliability and improve the service.
• Comply with applicable legal obligations.

We do not use your care information to diagnose conditions, make medical decisions, or replace communication with qualified healthcare professionals.

We do not sell your personal or care information, and we do not use it for targeted advertising.

We disclose information only as reasonably necessary to service providers that help us operate MyDocDay. These currently include Vercel for application and API hosting, private profile-image storage, and website analytics; Neon for managed database hosting; and Expo for mobile push-token registration, push delivery, and delivery receipts when notifications are enabled. These providers process information for us under their applicable contractual and security obligations.

When you direct MyDocDay to open a calendar, map, email, phone, or browser application, the receiving service processes the information needed for that action under its own privacy practices.

We may also disclose information when required by law, to protect the rights and safety of MyDocDay or others, to investigate fraud or misuse, or as part of a merger, financing, acquisition, or sale of the service. If ownership changes, personal information will remain subject to this statement unless you are notified otherwise.

Account and care records are stored in a managed PostgreSQL database. Profile images are stored in private object storage and served through an authenticated MyDocDay endpoint. Our providers may process information in the United States and other locations where they operate.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access, password hashing, protected mobile session storage, private image storage, encrypted network connections, and account-scoped database requests. No method of storage or transmission can be guaranteed to be completely secure.

We retain account and care information while your account is active and as reasonably necessary to provide MyDocDay, comply with law, resolve disputes, prevent abuse, and enforce agreements. Individual providers, appointments, medications, health actions, reminders, notes, and profile images can be removed through available product controls.

You may request deletion of your account and associated information through the account-deletion pathway on our Support page. After verifying the request, we will delete or de-identify information that we are not legally required to retain. Limited copies may remain temporarily in protected backups or logs before being overwritten through ordinary retention cycles.

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of certain personal information, or to withdraw consent for certain processing. You can update many account and care details directly in MyDocDay or contact us to make a request. We may need to verify your identity before fulfilling it.

Withdrawing consent or deleting required account information may prevent us from continuing to provide some or all of MyDocDay.

Additional disclosures and request instructions for consumer health information are available in our Consumer Health Data Privacy Policy.

Only enter information about another person when you are authorized to organize or manage that person's care information. You are responsible for using that information appropriately and keeping it accurate. MyDocDay does not independently verify your legal or care relationship with that person.

MyDocDay accounts are intended only for adults age 18 and older. We do not knowingly allow people under 18 to create their own MyDocDay account. A parent, guardian, or other authorized adult may enter dependent information through the adult's account where permitted by law. Contact us if you believe a minor created an account or information was entered without appropriate authority.