Privacy policy

Scope

This policy applies to the Mada Medical mobile application, Medica Web, and associated services used by authorized employees and contractors.

Data we process

Account information includes your name, email address, access permissions, and authentication credentials. Passwords are stored hashed. The mobile app also stores your session and language preference.

We process work records, uploaded documents and photos, communications, and activity logs provided or generated during authorized use. Uploaded documents may contain personal or health-related information.

With your permission, photos captured in the mobile app may include GPS coordinates and capture time. We do not use location for continuous or background tracking, advertising, or mapping your movements.

With notification permission, we store a Firebase Cloud Messaging device token to send service notifications. Push notifications are optional.

Device permissions

The Android app may request camera and photos or media access to capture or attach images, location while using the app to attach GPS coordinates to a captured photo, and notification permission. You can manage these permissions in your device settings.

Why we use it

We use data to provide the service, authenticate users, maintain records, support authorized work, and send relevant notifications. We do not use it for advertising, selling personal data, or public marketing profiles.

Sharing and processors

Data is available to authorized Mada Medical staff according to their role. We do not sell personal data.

We use infrastructure processors acting on our instructions, including cloud hosting for the API and database, object storage for uploaded files (Amazon S3 or equivalent), and Firebase Cloud Messaging for push delivery. We do not use advertising SDKs or third-party analytics cookies in the mobile app.

Children

Medica is an internal workplace tool. It is not directed at children. We do not knowingly collect data from children under 16. Accounts are issued only to authorized adult staff and contractors.

Advertising

The Mada Medical app and Medica Web do not display ads and do not use your data for advertising.

Security and retention

Data is transmitted over encrypted connections and stored on secured infrastructure operated for Mada Medical. Retention follows internal operational, security, and accounting requirements. Do not upload information beyond what your role requires. Session credentials on the mobile device remain until you sign out.

Your rights

Depending on applicable law, you may request access, correction, or deletion of personal data related to your account. Records may be retained as required for business and accounting purposes.

Contact

For access requests, privacy questions, or legal inquiries, contact your Mada Medical administrator or the data protection contact designated by your organization. You can also use the developer contact details published on the app’s Google Play listing.