Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User", "You") and the developer of Medodi ("Developer", "We", "Us"), an independent individual developer operating from Romania (EU), and not a corporate entity.

By downloading, installing, or using the Medodi application, you explicitly agree to these Terms and the Privacy Policy incorporated herein.

If you do not agree to all terms, you must immediately cease using the Application and delete it from your device.

Medodi is strictly a personal data organization and local storage software tool. It does NOT:

• Diagnose, treat, mitigate, or prevent any medical condition
• Constitute the practice of medicine or provision of healthcare services
• Provide any form of clinical decision support or medical analysis
• Integrate with the European Health Data Space (EHDS) or national health systems

You expressly acknowledge that no doctor-patient relationship is formed. Any charts, trends, or summaries displayed are informational only — they are NOT medical analysis and must NEVER be relied upon for medical decisions.

Medodi is "software for general purposes" within the meaning of MDCG 2019-11 and is NOT a medical device under Regulation (EU) 2017/745 (MDR).

Medodi employs a decentralized, zero-knowledge, end-to-end encrypted architecture (E2EE). All cryptographic operations happen exclusively on your device.

• Data is encrypted locally using keys derived from your device's Secure Enclave/Keystore and your PIN
• If you enable Cloud Sync, data leaves your device strictly in an opaque, encrypted format (ciphertext)
• The Developer does not store, transmit, or possess your unencrypted master key, PIN, or raw health data
• Biometric authentication is processed entirely within the device's Secure Enclave — Medodi receives only a boolean success/failure result

Medodi is designed according to security-by-design and security-by-default principles. We provide security updates and will disclose and remediate vulnerabilities. Report vulnerabilities to contact@medodi.com.

By using Medodi, you accept full and sole responsibility for maintaining access to your encryption keys.

You release the Developer from liability for data loss resulting from your loss of credentials or recovery phrase. This release does NOT apply to data loss caused by a defect in the Application itself.

On your death or incapacity, your encrypted data remains encrypted and accessible only to persons holding your recovery phrase or social-recovery guardian shard; Medodi cannot release data to heirs or next of kin.

You acknowledge that you may store "Special Category Data" (e.g., medical records, test results) within the App. Under Article 9 of the GDPR, you give explicit, informed, and unambiguous consent for Medodi to process this data locally on your device.

If Cloud Sync is enabled, you consent to the transmission of encrypted ciphertext to third-party cloud providers. Due to the zero-knowledge design, this data is strictly anonymous and inaccessible to us.

You may withdraw this consent at any time in Settings → Compliance, without affecting the lawfulness of processing based on consent before its withdrawal.

Local storage of your encryption keys and vault data is strictly necessary for the operation of the Application and is therefore exempt from consent under Article 5(3) of the ePrivacy Directive (2002/58/EC); non-essential processing (analytics, crash reporting) is subject to your separate explicit consent.

You maintain the right to cryptographic and physical erasure (Right to be Forgotten). Deleting your account will:

• Immediately and securely shred all local cryptographic keys
• Issue a deletion request to our remote sync servers
• Permanently destroy all encryption material, making any remaining ciphertext mathematically impossible to decrypt

The Developer grants you a personal, worldwide, royalty-free, non-assignable, nonexclusive, revocable, and limited license to use the Application for personal, non-commercial purposes.

You agree NOT to: (a) copy, modify, reverse engineer, decompile, or disassemble the App; (b) use the App for commercial purposes without authorization; (c) bypass or breach any security device or protection used by the App.

All intellectual property rights belong exclusively to the Developer.

Medodi is provided completely free of charge, with no in-app purchases, subscriptions, or hidden costs. The application contains no advertising.

Because the service is free, you acknowledge that the Developer provides it on a best-effort basis and makes no guarantees regarding continuous availability, uptime, or feature completeness.

You agree to defend, indemnify, and hold harmless the Developer from and against any and all claims, damages, obligations, losses, liabilities, costs, or debt arising from your use of and access to the App, or a breach of these Terms.

These Terms shall be governed and construed in accordance with the laws of Romania, without regard to its conflict of law provisions. Any dispute arising out of these Terms shall be settled by the competent courts of Romania.

YOU AGREE TO WAIVE ANY RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT OR CLASS-WIDE ARBITRATION.

This agreement is concluded strictly between you and the Developer (Medodi), not with Apple Inc. or Google LLC. Apple/Google have no obligation to provide maintenance, support, or warranty for this application. Apple/Google are not responsible for any claims related to the app.

Apple is a third-party beneficiary of these terms and has the right to enforce them against you.

If any provision of these Terms is held to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall remain in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable.

We may update these Terms periodically. When we make material changes, we will notify you in-app and may require re-acceptance. Continued use of the Application after changes constitutes acceptance of the updated Terms.

The version number and effective date are displayed at the top of these Terms.

The Developer shall not be liable for any failure or delay in performing obligations under these Terms due to causes beyond reasonable control, including but not limited to: natural disasters, pandemics, wars, sanctions, government actions, cyberattacks, internet outages, or failures of third-party services.

These Terms, together with the Privacy Policy, constitute the entire agreement between you and the Developer regarding the use of Medodi. They supersede all prior agreements, representations, and understandings.