Privacy Policy for MedCard

Last updated: 21 October 2026

MedCard ("the app", "we", "us") is a personal card wallet for storing your medical, insurance, loyalty, membership, and other cards on your device. This policy explains what data the app handles and how it is protected. In short: MedCard does not collect your data and has no servers of its own.

Data We Collect

We do not collect, transmit, sell, or share any personal data. MedCard has no analytics, no advertising, and no account with us. We never receive your card details, images, or any identifying information.

Data You Store in the App

The following stays on your device, encrypted:

• Card details you enter or scan — card identifier, cardholder name, issuer, and the card's scannable code.
• Card images you capture or attach.

This information is encrypted on your device using AES-256 encryption. The encryption keys are held in your device's secure hardware (iOS Keychain / Secure Enclave or the Android Keystore) and never leave it.

Camera and Text Recognition

MedCard uses your camera, with your permission, only to scan a card when you add or update one. Text recognition (OCR) runs entirely on your device. Captured images and recognized text are never uploaded to us or to any third party.

Biometric Authentication

Access to your cards is gated by your device's biometrics (Face ID, Touch ID, or fingerprint) or device passcode. This authentication is performed by your operating system on the device. MedCard never receives, stores, or transmits your biometric data.

Backups to Your Own Cloud

If you use the backup feature, your encrypted card data is copied to cloud storage that you already own and control:

• iOS: your personal iCloud, inside the app's private iCloud container, authenticated by your Apple ID.
• Android: your personal Google Drive, in the app's private appDataFolder, authenticated by your Google account.

There is no MedCard server or account in this process. The data remains encrypted, and we cannot access it. Your use of iCloud or Google Drive is governed by Apple's and Google's own privacy policies.

Data Sharing

We do not share your data with anyone, because we never have it. No third parties receive data from the app.

Data Retention and Deletion

Your card data lives on your device until you delete a card or uninstall the app. To remove backed-up data, delete it from your iCloud or Google Drive, or use the app to remove cards before backing up again. Uninstalling the app removes the on-device data.

Children's Privacy

MedCard does not knowingly collect data from anyone, including children. A caregiver may choose to store a child's card on their own device; that data is handled exactly as described above and never transmitted to us.

Changes to This Policy

We may update this policy as the app evolves. Material changes will be reflected here with a new "Last updated" date.

Contact

Questions about this policy? Contact us at apps@stratadevs.com.