1Introduction

Medsys (“the app”) respects your privacy and the privacy of your patients. This policy explains what data the app handles and how it is stored and protected. Developer: Omran Adam.

2Data the app handles

All data is entered by your clinic’s staff, and we collect none of it:

• Patient data: name, file number, mobile number and insurance details.
• Medical visits: diagnosis, examination, lab, radiology and procedure orders and results.
• Invoices, payments and insurance reports.
• Staff: names, roles and PINs.
• The clinic logo and details, if you add them.
• The device name, used only to tell devices apart when syncing through iCloud.

3Where data is stored

Data is stored in a database on your device. The developer runs no servers and receives no data. If you turn on optional sync, data is stored in your own iCloud account through Apple’s CloudKit and shared only with the devices you invite through a share link.

4What we don’t do

• We don’t collect, sell or share your data with anyone.
• We use no analytics, tracking or advertising tools.
• We include no third-party libraries that collect data.
• The app doesn’t ask for location, camera or contacts access. If you pick a logo from your photos, you choose it yourself.

5Sharing and backups

Sharing happens only when you decide: through an iCloud link to devices you invite, or when you export a backup, report or invoice. Those files are your responsibility, so keep them somewhere safe. iCloud is governed by Apple’s privacy policy.

6Security

• Each employee signs in with a PIN and sees only what their role allows.
• The app runs inside Apple’s sandbox.
• iCloud data is encrypted in transit and at rest by Apple.
• We recommend changing the default PINs before real use and enabling a passcode on the device.

7Your control

You own your data. You can edit or delete it inside the app, and deleting the app removes local data from the device. iCloud data is managed from your iCloud account settings or by turning sync off. How long data is kept is decided by the clinic owner.

8Clinic responsibility

Patient data is sensitive. The clinic is responsible for obtaining patient consent where required and for complying with the health-data laws of its own country.

9Children

The app is intended for medical and administrative staff and is not directed at children. We collect no data about them.

10Changes to this policy

We may update this policy, and the last-updated date at the top will change. Continuing to use the app after an update means you accept it.