Privacy Policy

Created On: 25 July 2025
Updated On: August 5, 2026

TECHSACARE PTE LTD. (“TechsaCare,” “we,” “our,” or “us”) develops and operates the EMR Electronic Medical Record mobile application (“EMR” or the “App”). This Privacy Policy explains what information the App accesses or collects, why it is used, when it is synchronized to our server, how it may be shared, how long it is retained, and the choices available to you.

Scope and No-Account Use

EMR does not require or offer account creation, user registration, social login, or an authentication profile. You can use the App without providing login credentials. Because the App does not create user accounts, there is no account to delete; however, you can delete locally stored information and request deletion of medical information that you voluntarily synchronized to our server, as described below.

Information We Access or Collect

• Medical records and health information. You may enter, import, view, edit, or manage medical PDFs and images, diagnoses, prescriptions, laboratory information, and clinical notes. This is sensitive health information and is processed only to provide the App’s record-management and optional synchronization features.
• Photos, media, and files. When you choose to import a medical PDF, image, or other supported file, the App accesses only the content you select or authorize through Android’s available file or media controls.
• Camera information. When you choose to photograph a medical document or report, the App requests camera access for that user-initiated action. Camera access is not used continuously or for unrelated purposes.
• Notification information. The App may request permission to send notifications relating to enabled App functions, processing, synchronization status, or other service notices. You can control notifications through Android settings.
• Optional synchronized information. Medical records remain local unless you select the Sync option. When you initiate synchronization, the selected medical PDFs, images, diagnoses, prescriptions, laboratory information, or clinical notes are transmitted to and stored on our server so the synchronization feature can be provided. The App does not automatically synchronize medical records.
• Analytics and diagnostic information. Google Analytics and Firebase Crashlytics may collect app interactions, app version, device model, operating-system information, identifiers, crash logs, performance information, and diagnostics. Medical files, diagnoses, prescriptions, laboratory information, clinical notes, and their contents are not sent to Analytics or Crashlytics.
• Advertising information. Google AdMob may automatically collect or receive IP address, app and advertisement interactions, diagnostic information, Android advertising ID, App Set ID, and other device or account identifiers. An IP address may be used to estimate a device’s general location. Medical records and their contents are not provided to AdMob or used for advertising.
• Communications. If you contact us, we receive the information contained in your message, such as your email address, support request, and any attachments you voluntarily provide.

Permissions Used

• Internet access. Used to perform synchronization only when you select Sync, deliver advertisements, send analytics and diagnostic information, and support essential network functions.
• Photos, media, or file access. Used when you select a medical PDF, image, or supported document to import, display, edit, or synchronize.
• Camera access. Used only when you choose to capture an image of a medical document or report.
• Notifications. Used to deliver App notifications that you permit. You may disable this permission through Android settings.

Where Android provides a runtime permission request, you can deny or later revoke the permission. Some related App functions may not work without the permission, but unrelated functions should remain available.

How We Use Information

• Provide local medical-record functions. Import, display, organize, edit, and manage the medical records you choose to use in the App.
• Provide optional synchronization. Upload and store only the records you choose to synchronize after you select Sync. Synchronization is not automatic.
• Maintain and improve the App. Measure general feature use, troubleshoot crashes, prevent abuse, secure the service, and improve reliability without sending medical-record content to analytics or advertising SDKs.
• Provide advertising. Display, measure, and protect advertisements through Google AdMob. Medical and health information is not used for ad personalization, targeting, or marketing.
• Support and compliance. Respond to requests, provide service notices, investigate security incidents, and comply with applicable legal obligations.

Local Storage and Optional Synchronization

Medical records are stored locally on your device by default. The App does not automatically upload or synchronize them. A server copy is created only when you voluntarily select Sync and choose to transmit the relevant information. You can continue using local record-management features without enabling synchronization, subject to the App’s technical requirements.

Clearing the App’s storage or uninstalling it generally removes information stored locally on that device, subject to Android behaviour and any device-level backup settings. Uninstalling the App does not automatically delete copies that you previously synchronized to our server. Use the in-app data-deletion option before uninstalling, or contact us if you need assistance deleting a synchronized copy.

How We Share Information

We do not sell your personal information or medical records. We disclose information only as described below:

• Server and infrastructure providers. Service providers may process voluntarily synchronized medical records solely to provide secure hosting, storage, synchronization, backup, security, and support functions on our behalf. They may not use medical information for their own advertising or unrelated purposes.
• Google Analytics and Firebase Crashlytics. These services process analytics, crash, performance, device, and diagnostic information to help us maintain and improve the App. They do not receive medical files or medical-record content from us.
• Google AdMob. AdMob processes advertising and device-related information to deliver, measure, and protect advertisements. We do not provide medical records, diagnoses, prescriptions, laboratory information, clinical notes, or their contents to AdMob.
• User-directed actions. Information is transmitted to our server when you select Sync. If the App offers a separate export or sharing action, information is shared only with the destination you select.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law or valid legal process, protect users or the public, investigate fraud or security incidents, or establish and defend legal claims.
• Business transfers. If TechsaCare is involved in a merger, acquisition, financing, restructuring, or sale of assets, information may be transferred as part of that transaction, subject to applicable law, confidentiality safeguards, and notice requirements.

Google processes information under its own terms and privacy practices. You can review the Google Privacy Policy at https://policies.google.com/privacy.

Data Retention

• Locally stored medical information. Retained on your device until you delete the relevant records, clear the App’s storage, or uninstall the App, subject to Android behaviour and any device-level backup settings.
• Synchronized medical information. Retained on our active server systems until you use the in-app deletion option or otherwise make a valid deletion request. Following a valid request, synchronized medical PDFs, images, diagnoses, prescriptions, laboratory information, and clinical notes are deleted from active systems within 30 days.
• Analytics and diagnostic information. Retained for up to 14 months and then deleted or aggregated/de-identified, unless a shorter period is required by law or configured for a particular service.
• Backups. Information deleted from active systems may remain in encrypted, access-restricted backups for up to 90 days before being automatically overwritten or permanently deleted. Backup copies are not used for ordinary business purposes and will not be restored except for disaster recovery, security, or legal necessity.
• Advertising data. Information collected directly by Google AdMob is retained and handled by Google under its applicable policies and user controls.
• Support, security, and legal records. Retained only as long as reasonably necessary to resolve a request, protect the service, prevent fraud or abuse, comply with law, or establish and defend legal claims. The information is deleted or de-identified when the applicable purpose ends.

Information that has been irreversibly aggregated or de-identified so that it can no longer reasonably identify or be linked to you may be retained for statistical, security, and service-improvement purposes.

Data Deletion

EMR does not create a user account, so there is no account to delete. You can delete individual medical records and other locally stored information using the controls available in the App. To delete medical information that you previously synchronized to our server, use the in-app data-deletion option. A valid server-deletion request is completed within 30 days, with residual backup copies removed within 90 days as described above.

Deleting local data, clearing App storage, or uninstalling the App does not automatically delete information previously synchronized to our server. If you no longer have access to the in-app deletion option, contact [email protected]. We may ask for limited information needed to identify the synchronized record and verify the request; information provided for this purpose is used only to process the deletion request and protect against unauthorized deletion.

We may retain limited information for a longer period only when required for security, fraud prevention, dispute resolution, or legal compliance. Such information is restricted to that purpose and deleted when the applicable obligation ends.

Your Choices and Rights

• Local control. View, edit, and delete records stored locally through the App’s available controls.
• Synchronization choice. Choose whether to synchronize medical information. The App does not automatically sync medical records.
• Permission control. Grant or revoke photos, media, files, camera, and notification permissions through Android settings.
• Server deletion. Use the in-app deletion option to request deletion of previously synchronized medical information.
• Advertising control. Manage advertising choices and reset or delete the Android advertising ID through applicable Android and Google settings. Where legally required, consent choices are presented through the App.

Depending on where you live, you may have additional rights, such as requesting access, correction, portability, restriction, objection, or deletion of personal information. Contact us to exercise an applicable right. We may verify the request before acting on it.

Security

We use reasonable technical and organizational safeguards designed to protect sensitive medical and other information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards include encryption in transit using HTTPS/TLS, encryption at rest for server-held medical information, authenticated and least-privilege administrative access, access-restricted backups, monitoring, and secure development practices.

Medical records remain on the device unless you initiate Sync. No storage or transmission method is completely secure, and we cannot guarantee absolute security. If we identify a security incident affecting your information, we will respond and provide notice as required by applicable law.

International Processing

TechsaCare and its service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers and require service providers to protect information consistently with this Policy and applicable law.

Children’s Privacy

EMR is not directed to children under 13, and we do not knowingly collect medical or personal information from children under 13 without appropriate authorization. If we learn that such information has been collected without appropriate authorization, we will take reasonable steps to delete it. A parent or guardian may contact us at [email protected].

Third-Party Links and Services

The App may contain links to third-party websites or services that we do not control. Their privacy practices are governed by their own policies. This Policy applies only to information handled by or on behalf of EMR, except where this Policy expressly describes a third-party service used within the App.

Changes to This Policy

We may update this Policy to reflect changes to the App, our practices, third-party services, or applicable requirements. We will post the revised Policy at a publicly accessible URL and update the “Last updated” date. Where required, we will provide additional notice or request consent before a material change takes effect.

Contact Us

Developer and data controller: TECHSACARE PTE LTD.

Privacy and support email: [email protected]

Website: https://techsacare.com