← Back to MEDRIS

Privacy Policy

Last updated: October 3, 2026

1. Introduction

MEDRIS ("we," "our," or "us"), a product of Aynora, is committed to protecting the privacy of biomedical and clinical engineers who use our platform. This Privacy Policy describes how we collect, use, and safeguard information when you use the MEDRIS web application (the "Service"), available at medris.app.

By using the Service you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2a. Information You Provide

Account information (name, email address, role), questions and error codes submitted to the Intelligent Copilot, and messages submitted through Help & Support.

2b. Google OAuth & Social Sign-In Data

When you sign in using Google ("Sign in with Google"), we receive basic profile information from your Google Account via Google's OAuth 2.0 service:

  • Email address: Used to create and identify your MEDRIS account and send critical notifications.
  • Full name: Used to personalize your workspace.
  • Profile picture: Displayed within your user profile in the app.
  • Google User ID: Used to securely link your authentication with your MEDRIS account.

Google API Services User Data Policy Compliance

MEDRIS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No Sale of Google User Data: We never sell, rent, or trade personal data obtained through Google OAuth to data brokers or third parties.

No AI Model Training on User Data: Google user profile information and private conversations are not used to train generalized artificial intelligence or machine learning models.

2c. AI and Voice Processing

Voice-to-text audio is transcribed via OpenAI Whisper. We do not store raw audio recordings. Text queries are processed by Google's Gemini API.

2d. Document Processing

PDF documents are rendered in-browser. PDF content is never stored on our servers. Images uploaded for OCR are processed encrypted and not retained.

3. How We Use Your Information

To provide and maintain the Service, authenticate your account (including via Google OAuth), prevent abuse, send transactional notices, monitor errors via Sentry, analyze product usage via PostHog, and process subscriptions via Paystack.

4. Data Storage and Security

Stored in Supabase-managed PostgreSQL hosted on AWS. Encrypted in transit (TLS 1.2+) and at rest (AES-256). Protected by Row-Level Security (RLS) policies.

5. Data Retention and Deletion

You may permanently delete your account and all associated data at any time from Settings → Data & Privacy. You may also disconnect MEDRIS at any time via your Google Account Security Settings.

6. Contact

For any privacy inquiries or data requests, contact us at [email protected].