Privacy-First Architecture

Privacy Policy & Data Commitment

Last Updated: October 2026 • MedQuire Inc.

Return to MedQuire Overview

Our Privacy-First Foundation

MedQuire operates under a strict privacy-first data policy. We believe that looking up healthcare details should never require giving up your confidential health background. Our architecture is built on four core principles:

Pillar 01

1. Minimal Data Collection

  • No Sensitive Medical Records: We do not collect or store your full medical history or sensitive health records.
  • Minimal User Accounts: Only basic account information (such as email and full name via Supabase) is stored for registered users.
Pillar 02

2. Local-First & Real-Time Processing

  • Local Storage: Search history and preferences are stored locally on your device.
  • OpenFDA Fetching: Medication label information is fetched directly from the official OpenFDA API in real-time.
Pillar 03

3. Secure Authentication

  • Row-Level Security (RLS): Auth and saved cabinet items are protected via Supabase security policies with strict row-level privacy boundaries.
Pillar 04

4. No Health Data Tracking or Sharing

  • Zero Commercial Selling: We do not track sensitive health behavior or sell user data to third parties.

1. Introduction & Scope

MedQuire Inc. ("MedQuire", "we", "our", or "us") provides software tools designed to help patients, caregivers, and everyday consumers navigate complex medication labels and package inserts through plain-language explanations.

This Privacy Policy governs your use of the MedQuire website (medquire.app) and the MedQuire mobile application. We treat personal data with the highest standard of caution and adhere to privacy-by-design standards across our infrastructure.

2. Minimal Data Collection & Zero Sensitive Medical Records

Unlike traditional health platforms, MedQuire does not operate as an electronic health records (EHR) repository:

  • No Sensitive Medical Records: We do not collect, ingest, or store comprehensive medical records, diagnoses, physician notes, genomic data, or full healthcare profiles.
  • Minimal User Accounts: When you create an optional registered account to sync your saved Cabinet items, only basic account identifiers (such as your email address and full name) are processed and maintained via Supabase.
  • Guest Access: You can use core features of MedQuire without registering an account. In guest mode, your searches remain strictly confined to your client device.

3. Local-First Storage & Real-Time OpenFDA Fetching

We structure our technical workflows to prioritize local execution over centralized cloud processing:

  • Local Storage: Your medication search history, recent inquiries, and interface preferences reside locally within your device's private sandbox storage (such as localStorage or encrypted client keychains). This information is not aggregated into centralized marketing profiles.
  • Real-Time OpenFDA Fetching: Medication label and package insert data are fetched directly from the official public OpenFDA API in real-time. We do not store queries alongside user identities on our backend servers.

Technical Guarantee: When you search for a drug or symptom, that inquiry is dispatched to public drug registry endpoints without linking to any persistent profile or health dossier.

4. Secure Authentication & Row-Level Privacy Boundaries

When users choose to sync their personal medication Cabinet across devices, we employ enterprise-grade authentication and access policies via Supabase:

  • Row-Level Security (RLS): Every database table storing saved Cabinet items enforces PostgreSQL Row-Level Security policies. Database rows can only be accessed or modified by the specific user token generated during active authentication.
  • Access Isolation: Even backend service accounts and administrative layers are restricted by strict cryptographic boundaries, preventing cross-tenant inspection of personal cabinets.
  • Encryption: All network traffic between your client device, Supabase, and OpenFDA is encrypted using TLS 1.3 in transit and AES-256 at rest.

5. Zero Health Data Tracking & No Selling to Third Parties

We take an unequivocal stand against the monetization of personal health information:

  • No Data Brokering: We never sell, rent, license, or monetize your search history, cabinet items, or user account information to third-party data brokers, insurers, pharmaceutical advertisers, or marketing aggregators.
  • No Health Tracking Pixels: We do not embed behavioral tracking pixels (such as Meta Pixel or third-party healthcare ad trackers) that observe medical searches.
  • No Behavioral Profiling: We do not construct dossiers, risk models, or behavioral scores based on what medications you look up.

6. Third-Party Services & APIs

MedQuire interacts only with verified infrastructure providers essential for core functionality:

  • OpenFDA API: Maintained by the U.S. Food and Drug Administration. Queries retrieve public medication labeling without submitting your private account credentials.
  • Supabase: Provides managed authentication and PostgreSQL database infrastructure with automated compliance certifications and strict Row-Level Security.

7. User Control & Data Deletion Rights

You maintain complete dominion over your data at all times:

  • Clear Local Cache: You can clear your search history and local storage at any time directly through the app settings or your browser configuration.
  • Account & Cabinet Deletion: If you wish to permanently delete your Supabase account and all associated saved cabinet items, you may initiate deletion within the app or email our privacy team at contact@medquire.app. Deletion is immediate and irreversible.

8. Non-Clinical Informational Disclaimer

MedQuire is an informational tool powered by public FDA labeling data designed to facilitate general comprehension. MedQuire does not provide clinical diagnoses, medical advice, or physician consultations. Always consult your prescribing doctor or a licensed pharmacist regarding medication adjustments.

9. Contact Our Privacy Team

If you have questions, feedback, or requests regarding this Privacy-First Data Policy, please reach out to:

MedQuire Inc. - Data Privacy Team

Email: contact@medquire.app

Website: https://medquire.app/