Privacy Policy & DPDP Act 2023 Compliance
Last Updated: August 26, 2026 • DPDP Act 2023 Compliant
MediMatch AI operates under a strict zero-data-retention policy for all processed medical scans, prescription OCR, and pill images. All computations occur in-memory during active sessions and are discarded immediately.
What Data We Collect
- Medical Images (Prescriptions, Pills, Lab Reports): Processed entirely in-memory. Never stored on servers. Discarded immediately after the session response.
- Text Inputs (Symptoms, Medicine Names): Sent to AI endpoint over HTTPS. Not persisted, not logged, not associated with any user identifier.
- Pill Reminders: Stored locally in your browser's localStorage only. MediMatch AI servers never receive reminder data.
- Analytics: Aggregate, anonymized usage analytics via Microsoft Clarity (heatmaps only — no personal health data).
- No Account Required: MediMatch AI does not require registration or login.
Third-Party Processors
- Google Gemini AI API: Medical queries and image analysis processed via Google's Gemini API. No personally identifiable information is included in API requests.
- Vercel (Hosting): Server infrastructure. May log request metadata (IP, timestamp) per standard logging practices.
- Microsoft Clarity: Anonymous heatmap analytics. Does not capture medical content entered by users.
- Google AdSense: Ad serving. Google may set cookies per their advertising policies.
Google AdSense & Advertising Cookies Policy
We use Google AdSense to serve relevant advertisements to users visiting MediMatch AI. In compliance with Google Publisher Policies:
- Third-Party Vendors: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to MediMatch AI or other websites on the internet.
- Advertising Cookies: Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to our site and/or other sites on the Internet.
- User Opt-Out Choices: Users may opt out of personalized advertising by visiting Google Ads Settings or by visiting www.aboutads.info.
Grievance Redressal & Rights under DPDP Act 2023
Under India's Digital Personal Data Protection Act 2023, as a Data Principal you have the right to access, rectify, or request erasure of locally persisted data. Contact our designated Grievance Officer:
Grievance Officer: Privacy & Compliance Lead
Email: privacy@medimatchai.in
Response Time: Within 7 business days