This Privacy Policy explains what information the MedKeepy app (the “App”) collects, how it is used, who it is shared with, and the choices you have. MedKeepy is operated by an individual developer (contact details at the end of this policy), who is the data controller for the purposes of the GDPR and UK GDPR.
Health data gets special protection. Almost everything you put into MedKeepy is data concerning health — a special category of personal data under Article 9 of the GDPR, and “consumer health data” under several US state laws. We ask for your explicit consent before storing it, and separately before any of it is sent to an AI provider. You can withdraw either consent at any time in the App.
MedKeepy contains no analytics SDK, no crash-reporting SDK, no advertising SDK and no tracking of any kind. We do not build a profile of you, we do not track you across apps or websites, and we do not sell or rent your personal data to anyone, ever.
We use the information above only to run the service you asked for: to hold your records and keep them in sync across your devices, to read the documents you upload and turn them into structured entries, to show your history and trends, to send the reminders you set up, to produce the PDF exports you request, and to manage your subscription. We also use it to keep the service working — investigating errors, preventing abuse, and enforcing storage limits.
Reading your documents is done by an AI model, and this only happens if you have turned the AI feature on. When you upload a document with AI processing enabled, the document — or a temporary, expiring link to it — is sent to OpenRouter, Inc., which routes the request to the AI model provider that handles it, currently Google (Gemini models). The current list of providers we allow is published on this page and is updated when it changes.
We send only what is needed to answer the request: the document itself. We do not send your name, your email address or your account identifier to the AI provider.
We do not use your documents or your records to train AI models, and we do not allow them to be used for advertising. Each provider listed below processes your document under its agreement with us and under its own privacy policy; we publish the current list so you always know who receives your data.
The App works without AI. If you turn AI processing off, or never turn it on, you can still add results manually, upload and view your files, track medications and visits, use folders and tags, and export a PDF. Turning AI off stops any new request immediately.
AI can be wrong. Automated reading can misread a number, miss a result, or produce text that does not fit your situation. Always check the original document. MedKeepy is not a medical device, does not provide medical advice, and is not a substitute for a doctor or pharmacist.
We do not sell your personal data and we do not share it for advertising. We use the following service providers (“processors”), each of which acts only on our instructions, under a written data-processing agreement, and may not use your data for its own purposes:
| Provider | What it handles | Where |
|---|---|---|
| Google LLC / Firebase (Authentication, Cloud Firestore, Cloud Functions, Remote Config) | Your account, and all structured records — results, medications, visits, profiles, folders, tags | United States |
| Cloudflare, Inc. (R2) | The document and image files you upload | United States |
| Google LLC / Firebase Storage | Standby file storage, used only if the primary file storage is unavailable | United States |
| OpenRouter, Inc. | Routing AI requests to a model provider | United States |
| Google LLC (Gemini API) | The AI model that reads your uploaded document | United States |
| OVH US LLC | Our own standby server for AI processing (Hillsboro, Oregon) | United States |
| RevenueCat, Inc. | Subscription status. Receives only an anonymous account identifier — never your health data | United States |
| Apple Inc. / Google LLC | Payment processing and, if you use them, sign-in | Global |
We require that any third party with whom we share user data provides the same or equal protection of your data as described in this policy, and each provider also processes data under its own privacy policy. We will update the table above whenever a provider is added or removed.
We may also disclose information if we are legally required to do so, or where necessary to protect our rights or the safety of any person.
MedKeepy's databases and file storage are located in the United States. If you use the App from outside the United States, your information is transferred to and processed there. Where personal data is transferred out of the European Economic Area or the United Kingdom, that transfer is made under the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), which our providers incorporate into their agreements with us. You can request a copy of the relevant safeguards using the contact details below.
US law may permit government authorities to access data in ways that differ from the protections available in your country. We tell you this plainly so your consent is informed.
We keep your records for as long as your account exists, because the purpose of the App is to keep them for you. When you delete a record, or a patient profile, it is removed. When you delete your account, everything is deleted as described below. Files that were never attached to a record are removed automatically. Documents sent to an AI provider are not retained by that provider after the request is answered.
You are in control of all of it:
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to receive a copy in a portable format, to have it deleted, to object to or restrict certain processing, and to withdraw consent. We do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not use it for automated decision-making that produces legal or similarly significant effects.
To exercise any of these rights, email us at the address below. We will respond within the time your law requires, and within one month in the EEA and the UK. We do not charge a fee, and we will not treat you differently for exercising a right. If you are in the EEA or the UK you also have the right to lodge a complaint with your local data protection authority.
MedKeepy lets you keep records for other people — a partner, a parent, or your child. If you add records for another adult, please make sure they know and agree; they have the same rights over their data as you have over yours, and they can contact us directly at the address below.
The App is intended for adults and is not directed to children. We do not knowingly allow anyone under 16 (or the minimum age required where you live) to create their own account. A parent or guardian may keep a child's records inside their own account. If you believe a child has created an account, contact us and we will delete it.
Your data is encrypted in transit and at rest. Access to your records is restricted to your account by server-side security rules, files are served only through short-lived, expiring links, and the developer accesses stored records only where necessary to investigate a problem you have reported. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.
We may update this policy as the App changes. The date and version at the top reflect the latest revision. If a change materially affects how your health data is used or who receives it, we will tell you in the App and, where the law requires it, ask for your consent again.
Questions, requests, or complaints about your privacy? Email mail@timeofjohnny.com. We aim to reply within a few business days.