Privacy Policy

Last updated: September 11, 2026

Medmapia collects only the information needed to operate its research, account, and launch-update services. The voluntary survey described below supports product research, not a clinical study.

1. Launch Waitlist Data Collection

Waitlist submissions contain an email address, audience type, optional country, consent timestamp, and submission source. We maintain strict confidentiality and do not sell or lease this contact detail to third parties.

2. Medical and Health Information

Do not submit personal medical records through the public website. The public survey does not request names, emails, diagnoses, uploaded records, or free-text medical information. Medmapia does not provide clinical advice through this survey.

3. Patient and Caregiver Survey

Participation is voluntary and limited to adults aged 18 or older who have considered or helped arrange treatment away from home. No purchase is required. We ask about broad journey stage, country/region, destination group, information sources, planning difficulties, and use of paid planning help. We also record the invitation channel, notice version, consent, submission time, and expiry time.

Survey answers are used to understand planning needs. They are not sold or joined to account profiles, launch-update email lists, or advertising identities. Survey consent is not marketing consent.

Survey responses expire after 180 days; daily cleanup normally removes them within 24 hours. Deleted data may remain in backups for up to 7 days.

Restored survey data must remain quarantined until withdrawal and expiry requirements have been applied. The restore-copy utility excludes backed-up survey responses from the restored working dataset.

Current survey notice version: 2026-09-v2.

4. Withdrawal and Privacy Requests

A successful submission provides a private deletion code. Only its hash is stored with the response. Use the deletion form on the survey page to remove the active response, including when collection is closed. We cannot recover the code from a name or email. Deletion cannot retract previously published non-identifying aggregate totals.

For privacy or deletion-support requests, contact support@medmapia.com. Do not send medical records or your private deletion code in ordinary support messages. Keep your code available for the secure deletion form.

5. Cookies and Service Logs

Cookies support essential site and account functions. Technical service logs may contain request metadata such as IP address, browser details, and request time. Survey answers and private deletion codes must not be included in analytics or application request-body logs.

6. Device-Local Mobile Planner

Mobile planner builds store your plan name, destination, budget, user-entered quotes, checklist and dates in encrypted storage on your device. This plan is not linked to your account, uploaded to Medmapia, or shared with advertising or analytics providers. Anyone who can access the unlocked app can view it. Do not enter medical records, diagnoses or other sensitive clinical details in planning fields.

Sharing is optional and shows a preview of the selected details before you choose a recipient or another app. The recipient or receiving app may retain or forward that information. Delete local plan removes the planner data managed on this device, but cannot recall shared copies. Do not rely on signing out or uninstalling the app to delete a local plan. Device-local plans have no server backup or recovery service.