Privacy Policy

The data controller for Mediva One is United Celestia Group. For privacy-related requests, contact us at privacy@medivaone.com.

We collect information in the following categories:

• Account information: name, email address, country, password (stored in hashed form), and profile photo if you add one.
• Medication and health organisation data: medicines, schedules, dose history, symptoms, hydration logs, and notes you enter.
• Documents: files and scanned images you upload, stored on your device and on our servers when cloud sync is enabled.
• Health integrations: measurements you authorise from Apple Health or Google Health Connect, such as heart rate, steps, sleep, and weight.
• Caregiver data: invitations, permissions, and shared views you configure in Circle of Care.
• Device and usage data: device type, app version, push notification tokens, and basic diagnostic logs needed to operate the Service.
• AI chat: questions and responses you choose to store locally in Ask Mediva One AI.

We use your information to create and secure your account, provide reminders and sync, store documents, enable caregiver sharing, send notifications you opt into, maintain and improve the Service, and comply with legal obligations.

We do not sell your personal information or health data to advertisers or data brokers.

• Create and secure your account and authenticate sessions.
• Provide reminders, sync, document storage, caregiver sharing, and other features you request.
• Send push notifications and emails you opt into.
• Maintain, troubleshoot, and improve reliability and security.
• Comply with legal obligations and enforce our Terms of Service.
• Generate Ask Mediva One AI replies when you opt in to third-party AI processing in the app.

Where applicable data protection law requires a legal basis, we rely on performance of a contract to provide the Service, your consent for optional integrations, legitimate interests to secure and improve the product, and legal obligation where required by law.

Health-related data is treated as sensitive. We only access Apple Health or Health Connect data after you grant permission on your device. You can revoke access at any time in your device Health settings.

Health summaries displayed in Mediva One reflect data you authorised. We do not use your health measurements for advertising or unrelated profiling.

We share information only with caregivers you explicitly invite (within the permissions you set), with service providers who process data on our behalf under strict confidentiality obligations, when required by law, or in connection with a merger or acquisition with notice where required.

• Caregivers you invite in Circle of Care, limited to permissions you enable.
• Infrastructure and email providers that host or deliver the Service on our instructions.
• Third-party AI (Ask Mediva One): only after you agree in the in-app disclosure and send a message, we transmit your message text, recent chat context, and active medication names, strengths, forms, and schedule labels to our servers, which call Groq, Inc. and Google LLC (Gemini, as backup) to generate a reply. We do not send your full health integration history, documents, or caregiver data unless you include it in a message. Providers are engaged under API terms that limit use to providing the service.

Your data is stored on your device and, when you use cloud features, on secure servers operated for Mediva One. We retain account data while your account is active.

When you delete your account, we permanently delete your profile, medicines, documents, and related server data within a reasonable period, except where limited retention is required for legal, security, or backup compliance.

We use industry-standard measures including encrypted transport (HTTPS/TLS), access controls, hashed passwords, and authenticated API access. No method of transmission or storage is completely secure; please use a strong password and keep your device protected.

Depending on your location, you may access, correct, or update profile information in the app; export or delete local data; delete your account and cloud data from Profile settings; withdraw consent for optional integrations; or lodge a complaint with a supervisory authority.

To exercise rights not available directly in the app, email privacy@medivaone.com. We may need to verify your identity before responding.

Mediva One is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

Your information may be processed in countries other than your own. Where required, we implement appropriate safeguards for cross-border transfers consistent with applicable law.

We may use limited, privacy-respecting analytics to understand app performance and usage patterns. Where available, you can opt out of non-essential analytics in Privacy Center settings.

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email where appropriate. The "Last updated" date at the top indicates when this policy was last revised.