Privacy Policy

Last updated: May 10, 2026

Korrali LLC ("we", "us", or "our") operates the MedScan mobile application ("App"). This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Photos you take. When you scan a medicine label, the image is sent to our server for processing. We do not store your photos. They are analyzed and immediately discarded.

Medicine data. When you save a medicine to your cabinet, we store the medicine name, dosage, dosage form, manufacturer, and RxNorm drug ID (RxCUI). If you are signed in, this data is stored on our servers linked to your account. If you are not signed in, it is stored only on your device.

Account information. If you sign in with Apple, we receive the user identifier Apple assigns you and, if you choose to share it, your email address. We do not receive your Apple ID password.

Usage data. We collect anonymized event data (e.g., scan started, scan completed, paywall shown) to improve the App. This data does not include photos or medicine names.

2. How We Use Your Information

• To identify medicines from photos and return results to you.
• To check for drug interactions using the U.S. National Library of Medicine RxNav API.
• To store your medicine cabinet so it is accessible across your devices when signed in.
• To process subscription payments via Paddle.
• To improve App performance and reliability.

3. Third-Party Services

We use the following third-party services:

• National Library of Medicine RxNav — drug interaction data. Medicine names and RxCUI identifiers are sent to this API. No personal information is included. See rxnav.nlm.nih.gov.
• Apple Sign In — authentication. Governed by Apple's privacy policy.
• Paddle — payment processing. Governed by Paddle's privacy policy. We do not store credit card numbers.
• PostHog — anonymized analytics. No photos or personally identifiable medicine data are included in analytics events.

4. Data Storage and Security

Server-side data is stored on infrastructure located in the ap-south-1 (Mumbai) AWS region. We use industry-standard encryption in transit (TLS) and at rest. Photos are processed in memory and never written to disk.

5. Data Retention

Medicine cabinet data is retained for as long as your account is active. Anonymous scan records are retained for up to 90 days for abuse prevention, then deleted. Photos are never stored.

6. Your Rights and Choices

You may request deletion of all data associated with your account at any time by contacting us at [email protected]. We will delete your account and all associated medicine cabinet data within 30 days.

If you do not sign in, your data is stored only on your device and can be removed by deleting the App.

7. Children's Privacy

MedScan is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Not Medical Advice

MedScan provides medicine identification and drug interaction information for informational purposes only. It is not a substitute for professional medical advice, diagnosis, or treatment. Always consult your pharmacist or physician before making any medication decisions.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

Korrali LLC
Email: [email protected]