How your data is protected

When you save a health detail in MedVault, the app locks it on your own phone first, and only the locked version is sent to be stored. The locking uses a key that is worked out from your password on your device. That key is never sent to us and is never kept on our servers.

The practical result is simple. What we store is a scrambled version of your health content that we have no way to unlock. It can only be opened on a device that has your key, which means with your password (or, if you have turned them on, the extra ways described below).

We want to be honest about what this does and does not mean. No server, including ours, can read the medical content you save. MedVault staff cannot read it. Someone who somehow reached the stored data would find only the locked version, which is of no use without your key.

A small amount of plain information does stay readable so the service can work at all. That is limited to things like which account a record belongs to and when it was saved. It does not include your conditions, your medicines, your notes, or the contents of your documents.

When you ask MedVault to read a document or write a summary, the part you choose is unlocked on your phone and sent, after you have seen it, to the AI service in Australia to do that one job.

Because we cannot read your content, we also cannot unlock it for you. That is the whole point of the design, and it means getting back in depends on you holding at least one of three things:

• Your password. This is the everyday way in. Your key is worked out from it each time you unlock.
• Your device, if you turned on Face ID or Touch ID. Your key is kept in the secure store on that one device, released only after your face or fingerprint. It never leaves the device and is not backed up.
• Your one-time recovery code. MedVault shows you a recovery code once, when you set up, for you to write down and keep somewhere safe. It is a second, separate way in if you ever forget your password.

Here is the part we will not soften. If you lose all of these, your password, your set-up device and your recovery code, then your saved content cannot be recovered, by us or by anyone. It is gone by design. This is the same trade that protects you from us being able to read it. We would rather tell you plainly than promise a back door that would also let others in.

The locked version of your records is stored on servers in Australia. When the app reads a document or writes a summary, that work also runs in Australia, using an AI service that stays onshore. What you send is not used to train AI models.

You can turn on two-step sign-in with an authenticator app for an extra layer at login, and you can delete your account and its data from inside the app at any time. Nothing the AI produces is saved or shared until you confirm it, and the app shows you what it is about to send first.

Email us at support@studioparallel.au, read the common questions, or see the shorter privacy and security overview. The full privacy policy has the formal detail.