MediDesk

This Privacy Policy governs the manner in which MediDesk ("we", "our", "us", or "the Application") collects, uses, maintains, protects, and discloses personal information and patient records, including data obtained via Google OAuth 2.0 authorization and Google People API (Google Contacts).

MediDesk is a specialized clinic management software application designed for healthcare practitioners and clinic administrative staff to manage patient registrations, visits, and billing, and to synchronize authorized patient contact records with Google Contacts for clinic appointment management and patient identification.

1. Information We Collect and Process

To provide clinic management and patient records functionality, MediDesk collects and processes:

• Clinic Patient Records: Patient full name, contact phone number, city or geographic location, and clinic visit/registration dates entered into your MediDesk clinic dashboard.
• Google Account Information: When you connect your Google Account, we access your Google account email address solely to display your connected account identity and verify your session.
• Google Contacts Information (Google People API): When authorized by you, MediDesk accesses contact names, phone numbers, and contact metadata in your designated Google Contacts account strictly to identify existing patient contacts, prevent duplicates, and apply consistent name formatting.

2. How We Use Google User Data (Google People API / Contacts)

MediDesk explicitly requests the following Google OAuth 2.0 scopes:

• https://www.googleapis.com/auth/contacts — Grants permission to read, create, update, and manage your Google Contacts.
• https://www.googleapis.com/auth/userinfo.email — Grants permission to view your Google account email address.

We use this Google user data strictly and exclusively for the following functional purposes:

• Patient Contact Creation: Automatically creating new contact cards in your authorized Google Contacts address book for newly registered clinic patients so clinic staff can recognize incoming patient calls and send authorized clinic appointment notifications.
• Smart Duplicate Phone Prevention: When multiple family members or friends share the same phone number (e.g. parents and children), MediDesk consolidates them into a single, clean contact entry to eliminate duplicate address book entries.
• Standardized Name Formatting: Renaming existing clinic contacts in your Google Contacts to match your clinic's standardized naming pattern (such as [Clinic Prefix] - [Patient Names] - [Phone] - [Date] - [City]).
• Automated Scheduled Sync: Running nightly scheduled synchronizations to ensure your clinic's address book remains accurately up to date.

3. Data Sharing, Transfer, and Disclosure

We respect the absolute privacy of healthcare practitioners and patients. We enforce the following strict restrictions:

• No Sale or Commercial Transfer: We do not sell, rent, trade, or transfer patient data or Google user data to any third party, broker, or advertising network.
• No Advertising or Marketing: Google user data and patient records are never used for targeted advertising, retargeting, promotional campaigns, or marketing profiles.
• No AI/Machine Learning Model Training: Google user data and patient contact records are never used to train, retrain, fine-tune, or improve generalized artificial intelligence or machine learning models.
• No Third-Party Access: We do not disclose Google user data to any external third parties except as strictly required by law or judicial process.

4. Data Storage, Security, and Encryption

We implement robust technical and administrative safeguards to ensure data security:

• Encryption in Transit: All communication between MediDesk, your browser, and Google API servers is conducted exclusively over TLS/HTTPS encrypted channels.
• Secure Token Storage: Google OAuth 2.0 access and refresh tokens are stored in secured, password-protected database tables. Sensitive credentials are never exposed in client-side code.
• Direct API Communication: Contact synchronizations occur directly between your clinic's server instance and Google's official People API endpoints without any intermediate data intermediaries.

5. User Control, Data Retention, and Account Disconnection

You retain complete control over your Google data and clinic records at all times:

• In-App Disconnection: You can disconnect your Google Account at any time directly within MediDesk by navigating to Google Contacts Manager and clicking "Disconnect".
• Immediate Token Revocation: When you disconnect your Google Account, all stored access tokens, refresh tokens, and sync sessions are permanently purged from the MediDesk database immediately.
• Google Security Settings: You can independently revoke MediDesk's access permissions at any time via your Google Account Third-Party Access Settings.
• Data Deletion Requests: If you wish to delete your clinic account or any associated records, you may submit a request using the contact information below, and all related data will be deleted within 3 business days.

6. Children's Privacy

MediDesk does not knowingly solicit or collect data directly from children under 13. When pediatric patients are registered by clinic staff, records are maintained strictly with parental or guardian consent under clinical care standards.

7. Updates to this Privacy Policy

We may occasionally update this Privacy Policy to reflect software improvements, operational changes, or legal requirements. When updates are published, the "Last Updated" date at the top of this policy will be revised.

8. Developer & Administrative Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or MediDesk's data practices, please contact us directly: