Privacy Policy

What Medows is

Medows is a personal clinical productivity tool for licensed medical professionals. It is notan Electronic Health Record (EHR) system, hospital information system, or official medical records platform. Think of it as a digital version of a doctor’s pocket notebook.

Data we collect

• Account data: email address, name, and role (doctor/nurse) via Google OAuth or email sign-up.
• Clinical data you enter: patient names, age, sex, weight, vitals, complaints, lab results, medications, clinical notes, and task lists.
• We do NOT collect: government IDs (Aadhaar, SSN, etc.), phone numbers, patient addresses, insurance details, or payment information.

How data is stored

• All data is stored on Supabase cloud infrastructure with encryption at rest and in transit.
• Row-level security (RLS) ensures each doctor can only access their own patients and those explicitly shared with them.
• Nurses can only view patients from doctors who have invited them to their team.

AI features

• Medows uses third-party AI services (Google Gemini) to provide clinical suggestions, summaries, and consult responses.
• Patient context (vitals, complaints, lab results) is sent to the AI provider to generate responses. Patient names are included for context but no government IDs are transmitted.
• AI-generated content is for reference only and does not constitute medical advice. All clinical decisions remain the responsibility of the treating physician.

Who can access your data

• You: full access to patients you created.
• Shared doctors: only if you explicitly share a patient with them.
• Team nurses: limited, read-mostly access to your patients if you add them to your team.
• Medows team: we do not routinely access your clinical data. Database access is limited to infrastructure maintenance.

Data retention

Active patient data is retained as long as your account exists. Discharged patient records are retained for your reference. You can permanently delete any patient at any time. Deleting your account removes all associated data.

Your responsibilities

• You confirm that you are a licensed medical professional authorized to handle patient information.
• You are responsible for the accuracy and appropriateness of data you enter.
• Do not enter government-issued IDs, contact details, or financial information of patients.
• Comply with your institution’s data handling policies.

Contact

For data concerns or questions, reach out at alapan@medows.ai or alapanx@gmail.com.