Privacy Policy

Effective date: August 2, 2026

1. Overview

MediBear Life ("we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we handle information when you use the MediBear Life mobile app (the "App") and our website, medibear.life.

The short version: MediBear is local-first. There is no account, no login, and no cloud sync. Your health data is stored encrypted on your phone and is not uploaded to our servers.

By using MediBear Life, you agree to this Privacy Policy. If you do not agree, please discontinue use of the App.

2. Information the App Processes

a. Data you enter, stored on your device

• Medications and schedules: names, dosages, reminder times, supply and refill information
• Health readings: blood pressure, blood glucose, HbA1c, cholesterol, weight, heart rate and any custom vitals you create
• Photos: optional photos of your medications, saved in the App's private storage

All of this lives in an encrypted database on your device. We do not store it on our servers, we cannot read it, and we never sell it or use it for advertising.

b. Caregiver sharing (optional, off by default)

If you choose to invite a family member or caregiver:

• Your email address and your invitee's email address are used to send the invitation and to verify identity with one-time codes
• The health summary you share is end-to-end encrypted before it leaves your phone. Our relay server stores and forwards only encrypted data it cannot read, plus the minimal delivery records needed to run the service
• You choose what is shared, and you can stop sharing at any time, which removes shared data from the relay

c. Subscriptions

Payment is handled entirely by the Apple App Store or Google Play; we never see your payment details. We use RevenueCat, a subscription management service, to validate purchase receipts and unlock your subscription. RevenueCat receives a random app-generated identifier and purchase information. It never receives your health data. RevenueCat also notifies our own server of subscription events for the advertising measurement described in section 2e.

d. What we do not collect

• No account, no login, no password
• No analytics or advertising use of your health data, ever
• No GPS or precise location access
• The App keeps a short technical error log on your device to help diagnose problems. It contains only error messages and stack traces, never your medications, vitals, or other health data, and it never leaves your device unless you choose to attach it when sending us a bug report

e. Advertising measurement (App)

From version 2.2, the App helps us tell whether our advertising on networks such as Meta and TikTok actually leads to installs. There is no advertising or analytics SDK inside the App: measurement runs through Apple's own privacy system and our own server, and it is strictly separated from your health information:

• What is shared: the fact that the App was installed and opened, subscription lifecycle events (a trial started, a purchase, a renewal), and coarse technical facts such as device model, operating system version, language and timezone. Our server may forward these event counts to the advertising network an ad ran on, solely to measure that campaign. Your IP address reaches only our own server, as with any internet request, and is never forwarded to advertising networks
• What is never shared: your medications, schedules, doses, vitals, notes, photos, caregiver activity or anything else about your health. These never leave your device
• On iPhone, install attribution uses Apple's privacy-preserving SKAdNetwork system, which reports anonymous, aggregate results. The App never shows a tracking permission prompt, never reads the advertising identifier (IDFA), and collects no advertising identifiers on any platform
• We do not build advertising audiences from App users, and we do not use this data for anything except measuring our own campaigns
• Measurement does not run for users in the European Economic Area, the United Kingdom or Switzerland

3. How We Use Information

• To run the App's features on your device: reminders, adherence tracking, charts, widgets and PDF export
• To deliver caregiver sharing, if you enable it
• To activate and restore your subscription
• To measure whether our advertising works, using only install and subscription events (section 2e)
• To respond when you contact support

4. Legal Basis for Processing

Where data protection law applies (for example the EU GDPR or the Australian Privacy Act), we rely on:

• Consent: for optional features such as caregiver sharing, which you turn on explicitly and can withdraw at any time
• Contract: to provide the App and your subscription
• Legitimate interests: to keep the service secure and measure our own marketing (see sections 2e and 8; app install measurement is switched off entirely in the EEA, UK and Switzerland)

5. Data Retention

• Health data: stays on your device. Uninstalling the App permanently deletes it; we hold no copies or backups
• Caregiver sharing: encrypted snapshots are kept on the relay only while sharing is active. Revoking sharing removes them
• Support email: kept only as long as needed to help you

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your data. Because your health data is stored only on your device, you can exercise most of these directly:

• Access and correction: view and edit everything in the App
• Erasure: delete records in the App, or uninstall it to remove everything
• Portability: export your records as a PDF from the App
• Withdrawal of consent: turn off caregiver sharing at any time

For anything we do hold (caregiver sharing records or support emails), contact us at [email protected] and we will respond in line with applicable law.

7. Security

• On-device encryption: your health database is encrypted at rest, with keys protected by the iOS Keychain or Android Keystore
• End-to-end encryption for caregiver sharing: only you and the person you invite can read shared data
• TLS 1.3 for all network connections
• Least privilege: our servers handle only what the sharing feature strictly needs

8. Website Analytics and Advertising (medibear.life)

This section applies to our public marketing website, medibear.life. The App shows no advertising and runs no analytics on your health data; the only measurement inside the App is the install attribution described in section 2e.

The website uses standard tools to measure traffic and the performance of our advertising:

• Google Analytics 4 and Google Tag Manager: aggregated traffic and engagement measurement
• Meta Pixel and Conversions API, TikTok Pixel and Events API: to measure ad-driven visits and App Store or Google Play download clicks, and to build advertising audiences

These tools may set cookies and process limited data such as your IP address, device and browser information, on-site actions (for example clicking a download button), and advertising click identifiers (for example fbclid or ttclid). The website has no sign-up form and does not ask for or collect your email address.

Tracking is active by default; you can decline at any time using the banner shown on your first visit, and your choice is remembered. Declining stops Meta and TikTok tracking, including the server-side mirrors, and drops Google Analytics to a cookieless, non-identifying mode.

9. Children's Privacy

MediBear Life is not intended for children under 16 years of age. We do not knowingly collect or process data from minors without verified parental consent. If you believe a child has provided us with personal information, contact us at [email protected].

10. International Data Transfers

Our servers (used only for caregiver sharing and the website) may process data in the United States or other countries. Where required, we rely on Standard Contractual Clauses and equivalent safeguards. Your health data itself stays on your device and is not transferred, except as end-to-end encrypted content when you use caregiver sharing.

11. Control of Your Data

• You can view, edit, or delete any information in the App at any time
• You can export your records as PDF reports for medical appointments
• No cloud sync means you own your data completely
• Uninstalling the App permanently deletes all locally stored data

12. Contact Us

Email: [email protected]
Support: [email protected]
Address: MediBear Life, Demo Labs Pty Ltd, Melbourne, Australia

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect new features, regulations, or best practices. We will note significant changes on this page, and the effective date above shows when it was last updated. Continued use of the App after changes constitutes acceptance of the updated policy.

14. Regulatory Compliance

MediBear Life is designed to comply with:

• GDPR (EU General Data Protection Regulation)
• Australian Privacy Act and OAIC Guidelines
• CCPA (California Consumer Privacy Act)
• HIPAA principles (though we are not a HIPAA-covered entity)

Our privacy-first, local-first architecture minimizes risk by design: we simply do not hold health data we do not need.