Privacy Policy

Who we are and what this covers

MDlist PRO is an iOS application published by Dr. Vladimir Pereligyn (Universum.earth). This policy describes the data the app collects, why, where it is stored, who processes it, and how you can delete it. The general website privacy policy applies to universum.earth; this page is specific to the app.

Data linked to you

The following data is tied to your account and is required for the app to work:

• Name and email address — received from Sign in with Apple or Google Sign-In through Firebase Authentication.
• Health data you enter: lab results, medications, medical records, imaging studies — stored in Firebase Realtime Database.
• Photos and documents of lab results you upload — stored in Firebase Storage.
• Other content you create: notes, calendar events, shared folders.
• User ID — a Firebase account identifier that links the records above to your account.

Data not linked to you

Device identifier, app interaction events, purchase events and coarse location derived from IP address are collected by Firebase Analytics without the advertising identifier (IDFA) and are used only as aggregate statistics. Crash reports and diagnostics are collected by Firebase Crashlytics to fix errors.

No tracking, no advertising

MDlist PRO does not track you across other apps or websites, shows no advertising and never sells or rents your data.

Who processes your data

We use the following service providers, each bound by its own data-processing terms:

• Google Firebase — Authentication, Realtime Database, Storage, Cloud Functions, Analytics, Crashlytics.
• Anthropic — when you ask the app to read a lab report or an imaging report, its text or photo is sent to our Cloud Functions and parsed by the Claude model (claude-haiku-4-5) to extract values. The result is returned to your records. Under Anthropic's commercial API terms this data is not used to train models.
• Apple — Sign in with Apple and in-app purchases (StoreKit).
• Google — Google Sign-In.

Security

All data is encrypted in transit (TLS). Starting with version 7.2, your records are also encrypted at rest. Firebase security rules restrict every record to the account that created it.

Retention and deletion

Your data is kept for as long as your account exists. You can delete the account inside the app (Settings → Delete account): this removes the authentication record and your data from Firebase. You can also request deletion by email.

Your rights

Under the GDPR and similar laws you may request access to your data, correction, erasure, portability, restriction of processing, and you may object to processing or lodge a complaint with a supervisory authority. The rights and the procedure are the same as in the website privacy policy.

Not a medical device

MDlist PRO is a records-keeping tool and is not a regulated medical device. It does not interpret reference ranges or dosages and does not replace a consultation with a physician.

Children

MDlist PRO is not directed at children under 16. We do not knowingly collect any information from children.

Contact

Questions about this policy or your data: vpereligyn@gmail.com

Changes

We may update this policy; the effective date above changes with every revision. Material changes are announced inside the app.