Privacy Policy

1. Information we collect

We collect the following categories of information:

a. Information you provide to us

• Account and waitlist information — name, email address, phone number, and whether you are signing up as a patient, pharmacy, or doctor.
• Prescription information — if you choose to upload a prescription (as an image, PDF, or entered text) so pharmacies can tell us whether they can fulfill it. You control what you upload and may decline to use this feature.
• Communications — messages you send us for support, feedback, or partnership inquiries, and any correspondence with pharmacies facilitated through the Services.
• Pharmacy/business information — if you register a pharmacy, business name, address, contact details, operating hours, services offered, and related listing content.

b. Information collected automatically

• Location information — with your permission, precise or approximate location (via GPS, Wi-Fi, or IP address) so we can show pharmacies near you and calculate distance. You can grant or revoke location permission at any time in your device or browser settings.
• Device and usage information — device model, operating system and version, unique device identifiers, app version, browser type, IP address, referring URLs, pages viewed, searches performed, and crash/diagnostic logs.
• Cookies and similar technologies — on our website, we use strictly necessary cookies/local storage to remember your preferences and keep the site functioning. We do not currently use third-party advertising cookies.

c. Information from third parties

• Availability, stock, and service information supplied to us by participating pharmacies.
• Mapping and location data returned by our mapping provider (Google Maps Platform) when you search for or view pharmacies.

2. Device permissions (mobile app)

Our mobile app may request the following permissions:

• Location — to find pharmacies near you and sort results by distance.
• Camera and photo library — to let you take or select a photo of a prescription to upload.
• Push notifications — to let you know when a pharmacy responds to a prescription request or when there are important updates about your account.
• Contacts (optional) — only if you choose to invite a pharmacy or doctor from your contacts; we do not access your contacts otherwise.

Every permission is optional and can be turned off at any time in your device settings, though some features of the Services may not work without it.

3. How we use your information

• Operate, maintain, and improve the Services, including matching your prescription against pharmacy availability.
• Show you relevant nearby pharmacies and calculate distance and directions.
• Communicate with you about your account, waitlist status, prescription requests, and support inquiries.
• Send service-related notifications and, where you have opted in, product updates and marketing.
• Monitor, secure, and troubleshoot the Services, including detecting fraud and abuse.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information.

4. How we share your information

• Participating pharmacies — when you submit a prescription or contact request, we share the relevant details with the pharmacy or pharmacies you select so they can respond to you.
• Service providers — vendors who host our infrastructure, process data on our behalf, or provide mapping (Google Maps Platform), communications, or analytics services, under contractual confidentiality obligations.
• Legal and safety — where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of MediMatch, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy or a successor policy.
• With your consent — for any other purpose disclosed to you at the time we collect the information.

5. Third-party services

We use Google Maps Platform to display maps, pharmacy locations, and directions. Your use of map features is also subject to the Google Privacy Policy and Google Maps Platform Terms of Service. Where you contact a pharmacy by phone, WhatsApp, or email through the Services, that communication is also subject to the relevant provider's (e.g. WhatsApp/Meta) own privacy practices.

6. Data retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Prescription images and requests are retained only for as long as needed to facilitate the relevant pharmacy request, unless you ask us to delete them sooner or we are required to keep them longer by law.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. If you are in South Africa, these rights arise under the Protection of Personal Information Act (POPIA); if you are located elsewhere, similar rights may be available to you under local law (for example, the GDPR in the EU/UK or state privacy laws in the US). To exercise any of these rights, contact us at info@medimatch.site. You can also uninstall the app or disable specific permissions (location, camera, notifications) at any time from your device settings, and unsubscribe from marketing emails using the link in those emails.

8. Children's privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Data security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to continually improve our safeguards as MediMatch grows.

10. International data transfers

We and our service providers may process and store information in countries other than your own, including outside South Africa. Where we do, we take steps intended to ensure your information receives an adequate level of protection in accordance with this policy and applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Services or by email.

12. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at info@medimatch.site.