Privacy

Privacy Policy

Effective August 28, 2026

Information used

MedoraKit stores the account, product access, study progress, clinic membership, and security information needed to provide the service. Marketing consent is optional and separate.

Security

Passwords are one-way hashed. Session and recovery tokens are stored only as hashes. Access controls are checked on the server, and clinic records are isolated by clinic membership.

Sharing

Private documents and clinical information are not sent to external AI providers without explicit, configured authorization. Service providers receive only the minimum information needed to operate approved functions.

Your choices

You may request account access, correction, export, or deletion subject to applicable retention and safety obligations. Contact support through the Help page.