Privacy Policy

1. What we process

• Account details (member features only): Email address, password (stored in a form that cannot be reversed), sign-up method (email or Google), and the nationality and language you optionally provide. With Google sign-in we receive your email address and account identifier from Google; we never receive your Google password.
• Verification record (if you complete visitor verification): Verification status, the nationality verified, the verification date and expiry, and a processing reference. We never store the original passport or ID document.
• Trip itineraries: Trip titles, dates, cities, categories of interest and procedure dates, plus the places, notes and times you add. Stored against your account. A procedure date can be health-related information, so it is used only to show your own schedule.
• Saved places: Places and hospital–wellness pairs you save while signed in, stored against your account so you can see them on other devices. When you are not signed in they stay on your device only.
• Shared price references: The facility, area, specialty, price range, month of visit and memo you submit, plus ratings such as language support, price clarity and waiting time. Stored against your account to prevent duplicate and manipulated entries; only aggregate figures are ever displayed, never individual posts. Specialty and month of visit can be health-related information.
• Scan photos: Used only to read signs and notices, then discarded immediately after analysis. Never stored on our servers.
• Photo location (EXIF GPS): Read once per scan, only with your explicit consent, to identify nearby facilities — then discarded.
• Translated sentences: Sentences you type or speak are sent for translation. Sentences translated in the conversation screen are stored with their translation and usage count, not linked to any account, to improve the common-phrase cards, and are reviewed before they appear as public cards. Conversations in 'Show to staff' are not stored and are cleared when you close the screen. Voice input uses your browser's (Chrome's) speech recognition on your device; only the resulting text reaches our servers.
• Facility error reports: The type and description of a report that a place has closed or has wrong details. No information about the reporter is stored.
• My location: When you use 'My location', your device's location permission is used to find where you are and move the map there. That coordinate is never sent to our servers or stored; only map data for the surrounding area is fetched from Kakao Map to draw the map.
• Map view position: The centre coordinate of the map you were viewing is sent so scan results can be ordered by proximity. It is not your device location and is not stored.
• On-device data: Language and region settings, places saved without signing in, visit cards (address, visit time, checklist and chosen phrases) with offline copies of their pages, and sign-in state stay in your browser storage and are not sent to our servers.
• Usage statistics: Anonymous per-feature counters only. We do not collect names, contact details or IP addresses.

2. Processors and international transfers

• Anthropic, PBC (USA): Image recognition and translation. Scan photos and sentences to be translated are sent there, deleted after processing, and not used for model training.
• Kakao Corp. (Republic of Korea): Map display. To draw the map, map data for the area on screen is fetched from Kakao Map; when you use 'My location', the surrounding area is requested. No account details such as your name or contact are sent.
• Google LLC (USA): Identity verification when you sign in with a Google account, and speech recognition by your browser (Chrome) when you use voice input.

Facility lookups call Korean public APIs (Health Insurance Review & Assessment Service, Korea Tourism Organization) without sending any personal data.

3. Retention

• Account details, verification record, itineraries, saved places: Destroyed immediately when you delete your account.
• Shared price references: When you delete your account, the link to you and your memo are removed; only the facility, specialty, price range and month of visit remain in aggregates that cannot identify you.
• Moderation records: Records of usage restrictions and report handling keep only the member number and the reason, for one year after the account is deleted in case of a dispute, and are then destroyed.
• Scan photos, photo location: Not retained.
• Translated sentences, facility error reports: Kept, unlinked to any account, for as long as the Service operates.
• Anonymous usage statistics: Kept indefinitely in a form that cannot identify anyone.

4. Your rights

• Access and correction: You can view and edit your account details and itineraries in MY.
• Account deletion: Delete your account yourself under MY → Delete account on the web or in the Android app. If you cannot sign in, email the contact below from the address you signed up with; we will verify the request and complete it within 10 days. Details: https://mediscent.kr/en/account-deletion The same page explains how to delete only some data, such as trip plans or saved places, while keeping your account.
• On-device data: Removed at any time by clearing the site data in your browser (Chrome for the Android app).
• Withdrawing permissions: You can turn off location and camera permissions in your device settings at any time.

5. Contact

Privacy enquiries: kindsr82@gmail.com (operated by DevScent). Any change to this policy will be posted here with a new effective date.