MedNotes — Privacy Policy

Last updated: June 3, 2026

MedNotes keeps everything you create — notes, handwriting, PDFs, images, audio recordings, and flashcards — on your device. We do not collect, transmit, sell, rent, or share your content or personal information. There are no accounts, no analytics, and no third-party trackers.

What we collect

Nothing. MedNotes has no servers and makes no network connections to us. Your content never leaves your device through MedNotes.

How your data is protected

• On-device encryption at rest using iOS Data Protection (Complete protection).
• App lock with Face ID / Touch ID, falling back to your device passcode, plus automatic lock after inactivity.
• Encrypted backups: backup files you create are encrypted with AES-256-GCM using a password you choose. We cannot recover a backup if you lose the password.
• An on-device access log records app activity (such as unlocks and backup/restore events) to support your own security review. It stays on your device.

Protected health information (PHI)

If you choose to store patient or other protected health information, it remains on your device under your control. MedNotes provides technical safeguards but does not by itself make your use compliant with HIPAA or any other regulation. You are responsible for meeting the legal and organizational requirements that apply to you.

Sharing

You can export and share your own files (for example, a backup or a PDF) using iOS share options. When you do, that data goes wherever you send it — that action and destination are controlled by you, not MedNotes.

In-app purchases

If subscriptions are offered, payments are handled by Apple under Apple's terms and privacy policy. MedNotes does not receive your payment details.

Children

MedNotes is not directed to children and does not knowingly collect information from anyone.

Changes

We may update this policy as the app evolves. If optional cloud sync is ever added, this policy will be updated to describe it before that feature ships.

Contact

Questions about this policy? Email Maytham.m.aljubori@gmail.com.