Terms of Service — DRAFT v0

Status: DRAFT. Must be reviewed by a qualified lawyer before any user other than the owner accesses the production environment.

1. Service

my-medical-data ("the Service") is a personal-use platform that allows individuals ("Users") to import, store, view, and analyse their own personal medical data, including clinical reports and data from connected wearable devices.

2. Acceptance

By creating an account and clicking "I accept", the User agrees to these Terms and the Privacy Policy in force on the date of acceptance. Each version is recorded with the User's account, the version string, and the timestamp of acceptance.

3. The User's data

• The User retains full ownership of all medical data they upload or that is pulled from connected providers on their behalf.
• The Service stores this data only to render it back to the User.
• The Service does not sell, share, or analyse User data for any purpose other than providing the Service to that User.

4. The Service is not a medical device

The Service does not provide medical advice, diagnosis, or treatment. Information shown by the Service must not be used as a substitute for professional medical advice. In an emergency, contact local emergency services.

5. Account security

The User is responsible for maintaining the confidentiality of their account credentials. Multi-factor authentication is required for all accounts.

6. User rights under GDPR

The User has, at any time, the right to:

• Access their data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase their data and account (Art. 17) — see Account → Delete my account
• Export their data in a portable format (Art. 20) — see Account → Export my data
• Object to processing (Art. 21)
• Lodge a complaint with the Romanian supervisory authority (ANSPDCP) or any other competent EU authority.

7. Termination

Either party may terminate at any time. Upon termination, the User's data is deleted within 30 days, except where retention is required by law.

8. Changes

Material changes to these Terms will be notified to the User by email at least 14 days before they take effect. The User must re-accept the new version to continue using the Service.

9. Governing law

These Terms are governed by Romanian law and applicable EU regulations.

10. Contact

The data controller is the operator of the Service. Write to the support address shown in the app's footer and on the Terms page, for help with the Service or to exercise the data rights described in the Privacy Policy.