Privacy Policy for MediKotha

1. About MediKotha

MediKotha ("we", "our", or "the app"), developed by MH-Nazmul, is an intelligent medicine adherence assistant, generic medicine directory, and health checkup logging application designed for Android users. This Privacy Policy governs our data practices across the MediKotha Android mobile application (Package ID: com.medikotha.app) and related online services.

2. Information We Collect and Why

Depending on how you use MediKotha, we may collect and process the following categories of information:

A. Account & Contact Information (Optional)

• Google Sign-In: If you choose to enable cloud synchronization or subscriptions, we authenticate your account via Google Sign-In, receiving your email address, name, and unique Firebase User ID (UID).
• Phone Number (SMS / Caregiver Verification): If using SMS-based caregiver monitoring alerts or carrier verification, your phone number is verified via one-time SMS passwords (OTP).

B. Health, Medication & Adherence Data

• Medicine Courses & Schedules: Generic and brand medicine names, strengths, dosages, meal relations, and scheduled reminder times.
• Adherence & Intake Logs: Timestamps when doses are recorded as taken, skipped, or missed.
• Health Checkup Records: Optional user-logged vital signs such as blood pressure (systolic/diastolic), blood glucose, heart rate, and body weight.
• Symptom Triage Notes: Voice or text queries submitted to the Kotha AI triage assistant. These sessions are processed strictly to assist you with symptom guidance and are never used for commercial profiling.

C. Device Permissions and Technical Data

MediKotha requests only the Android permissions necessary to provide its core healthcare assistance features:

• POST_NOTIFICATIONS & SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM: Essential to ring alarms and display actionable dose reminders at your exact prescribed times, even in low-power Doze mode.
• USE_FULL_SCREEN_INTENT & SYSTEM_ALERT_WINDOW: Allows timely dose reminder popups to interrupt locking screens so urgent doses are never overlooked.
• CAMERA: Used on-demand to scan physical prescription sheets and packaging boxes. Images are processed locally on your device via Google ML Kit OCR and are not transmitted to external advertising networks.
• RECORD_AUDIO: Used exclusively during interactive Bengali/Banglish voice triage with the Kotha AI assistant. Audio is converted to text for symptom triage and is never recorded covertly.

3. How We Store and Protect Your Data

• Local Storage: By default, all medicine courses, dose history, and health logs reside locally on your smartphone in an encrypted SQLite database.
• Cloud Encryption: When Cloud Sync or Caregiver Monitoring is enabled, data is transferred exclusively via TLS/HTTPS encryption and stored in Google Cloud Firestore with strict document-level Access Control (RBAC).
• No Selling of Personal Data: We never sell, rent, monetize, or trade your personal health data to data brokers, pharmaceutical advertisers, or marketing intermediaries.

4. Third-Party Services

MediKotha integrates with industry-standard, secure infrastructure providers:

• Google Firebase: Firebase Authentication, Cloud Firestore, and Cloud Functions are used for secure account management, encrypted backup, and backend operations.
• Google Play In-App Billing: All subscriptions and consumable donations are handled directly through Google Play's PCI-compliant billing system. MediKotha never accesses, stores, or transmits your credit card or payment credentials.
• Google ML Kit: Operates entirely on-device for optical character recognition (OCR) of medicine names and prescriptions.

5. Caregiver & Remote Monitoring Sharing

If you designate a family member or caregiver as a monitor:

• You explicitly authorize them to view your adherence status and receive missed-dose alerts.
• Transcripts of confidential symptom triage sessions and private medical condition notes are never shared with caregivers.
• You retain the power to revoke caregiver access instantly at any time from the app's Monitor tab.

6. Data Retention and Deletion Rights

We believe you should have complete sovereignty over your health data:

• In-App Immediate Deletion: You can wipe all local and cloud data at any time inside the app by going to Settings → Data & Storage → Delete all data.
• Web Data Deletion Request: If you have uninstalled the app or cannot access your device, you can submit an instant deletion request via our dedicated Data Deletion Request Page. Requests are processed within 48 hours.

7. Children's Privacy

MediKotha is intended for adult patients, caregivers, and individuals managing medications under proper medical guidance. We do not knowingly collect personal information from children under the age of 13. If a parent or guardian becomes aware that a child has provided us with personal information, please contact us for prompt removal.

8. Changes to this Privacy Policy

We may update our Privacy Policy periodically to reflect app updates or legal requirements. Any revisions will be published on this page with an updated Effective Date. Continued use of MediKotha after changes implies acceptance of the revised terms.

9. Contact Us

If you have any questions, concerns, or data protection inquiries regarding this Privacy Policy or MediKotha, please contact the developer: