Privacy policy

Last updated July 28, 2026

You are telling us things you would not tell most people. This page says plainly what we hold, who can read it, how long it stays, and how to get rid of it.

What we collect

What you give us.Your name and email address. Your questions and the doctors’ answers. Anything you attach — photographs, lab results, discharge summaries, scans of paper reports. Whatever you tell a doctor about your health, medications, and history. If a clinician keeps a record for you, the notes they write in it.

What comes with the connection. Your IP address, browser and device type, and the times you signed in. We use this to keep accounts secure and to notice when something is being attacked, not to build a profile of you.

Payments. Our payment processor handles your card. We receive that a payment succeeded, its amount, and the last four digits — never the full number.

Why we hold it

To let a doctor answer your question and to give you the answer. To keep the medical record that state law requires of anyone practising medicine. To take payment and issue refunds. To email you when a doctor replies. To keep the service working and safe.

That is the whole list. We do not have a marketing use for your health information, and we do not intend to find one.

Who can read it

You. The physician handling your case, and any specialist they bring in — we tell you when a case is passed to someone else. Nobody else on our side opens your consultations to read them.

A small number of our engineers can reach the systems your data sits in, because somebody has to run the servers. Their access is logged, and they do not read consultations as part of doing that work.

We hand your information to someone outside the company only when you ask us to, or when a court order or the law leaves us no choice. If we are ever compelled and permitted to tell you, we will.

Companies that help us run this

We use outside services for hosting and the database, for sending email, and for taking payments. Each is bound by contract to use your information only to do the job we hired them for. Our database and file storage currently sit on servers inside the European Union, which is a stricter regime than US law requires.

What we never do

We do not sell your data — not for money, not for anything else of value. We do not give it to advertisers or data brokers. We do not use what you wrote to a doctor to target you with anything, anywhere. We run no advertising trackers on the pages where you write to us.

How it is protected

Everything travels over an encrypted connection and is encrypted where it is stored. Attachments live in private storage: a file opens through a link that is generated for you and expires within the hour, so a copied link is worthless a while later. Access to your record is enforced by the database itself, not only by the app, so a bug in one page cannot expose another patient’s file.

No system is beyond reach. If a breach ever affects your information, we will tell you and the relevant authorities, within the deadlines the law sets.

How long we keep it

Consultations are medical records, and medicine does not let a doctor throw those away on request. Most states require them to be kept for at least seven years after the last contact, and longer where a patient was a minor at the time. We keep them for that period, then delete them.

Sign-in logs are kept for 12 months. Records of payments are kept as long as tax law requires, normally seven years.

Deleting your account

You can delete your account from your profile whenever you want. That closes your access, removes your name and email from our active systems, cancels any subscription, and deletes your attachments.

The clinical record of a consultation that already happened stays in restricted archive storage until the retention period above runs out, because the law requires it. It is not visible in the product, it is not used for anything, and it is deleted when the period ends. This is the one thing we cannot erase on the day you ask.

Your rights

You can read everything in your account at any time. Ask us and we will send you a copy of your data in a form you can keep, correct anything that is wrong, or tell you exactly what we hold about you. Write to us and we answer within 30 days.

If you live in California, Colorado, Connecticut, Virginia, Texas or another state with a privacy statute, those laws give you rights to access, correct, delete and port your data, and to be told whether it was sold or shared. We do not sell or share it, so there is nothing to opt out of — the rest of those rights we honor for everyone, no matter which state you are in.

Exercising any of this costs nothing, and we will not treat you differently for it.

Cookies

We set one kind of cookie: the one that keeps you signed in. There is no advertising cookie, no tracking pixel, and no third-party analytics script following you between sites. Clearing cookies signs you out and breaks nothing else.

The medication reference

Reading about a medication needs no account, and we do not tie those page views to you. The text comes from the FDA’s public label database and the National Library of Medicine. Looking up a drug does not tell any doctor here that you did.

Children

Accounts are for adults. We do not knowingly collect information from anyone under 18 who is acting on their own behalf. A parent or guardian may ask about a child from their own account, and what they write is held under this policy. If a child created an account, tell us and we will remove it.

Changes

When this policy changes, the date at the top changes with it. If a change affects what we do with information we already hold, we will email you before it takes effect.

Contact

Write to privacy@medcally.com with anything about your data, or send a message from your account. See also the terms of service.