Privacy Policy

MedBuk+ is operated by Axcel Healthcare Sdn. Bhd. (registration 202001017559 (1373879-U)), G-5 & G-6, Blok Anggerik 1, Jalan Berkat 15, Taman Malim Jaya, 75250 Melaka, Malaysia (“MedBuk+”, “we” or “us”). We are the data user (controller) responsible for the personal data described in this policy.

This policy covers the MedBuk+ mobile app for iOS and Android, the MedBuk+ web app and our websites.

The MedBuk+ Android app is published on Google Play by Axcel Healthcare Sdn. Bhd.; the iOS app is published on the App Store by VIGOR DIGITAL SOLUTION SDN BHD on behalf of Axcel Healthcare Sdn. Bhd. Axcel Healthcare Sdn. Bhd. remains responsible for the service and your data.

Contact us about privacy, your data or this policy at support@vigordigital.org.

MedBuk+ is offered in Malaysia to adults aged 18 and over. You declare your date of birth when you start, and MedBuk+ cannot be used by anyone under 18. It is not directed at children. If we learn that an account belongs to someone under 18, we will close it and delete its data.

Account information: your name or display name, email address, and the sign-in method you use (an email code or password, or Sign in with Apple or Google sign-in where offered). If you use Apple or Google, we receive an account identifier and the email address that provider shares with us. We also keep your language preference and the date of birth you declare when you start, which we use only to confirm you are 18 or older.

Health and wellness records you choose to add: step counts read from Apple Health or Health Connect after you grant permission (read-only; steps are summarised on your device and only totals, not individual samples, are saved to your account); blood pressure, pulse, blood glucose and weight readings you enter or confirm from a photo; meals and their estimated energy; mood check-ins (a mood level, optional tags such as sleep or work, and an optional short note); and, if your employer uses MedBuk+, medical leave details and certificate photos you decide to submit. We never write data into Apple Health or Health Connect.

Photos you submit for analysis: photos of a meal, blood pressure monitor or glucose meter, used as described in section 5.

Community and rewards information: your profile alias and handle, an optional city and short bio, people you follow, clubs, events and challenges you join, challenge progress and activity cards you choose to share, points, welcome rewards, vouchers and redemptions.

Workspace information: if a company invites you, the invitation, your membership and the workspace you belong to.

Device and technical information: IP address, browser or device type (user agent), sign-in session records, security and audit logs, an app installation identifier and, if you allow notifications, a push notification token.

Optional app activity measurement: only if you turn it on in Privacy settings, we record which app screens are used on which days so we can count active users. It is off by default and can be turned off at any time.

Messages you send us, such as support or privacy requests.

We do not access your contacts, we do not include advertising or third-party analytics software in the app, and we do not ask for your national identity card to create an account.

We use your information to create and secure your account; store, organise and show your records in your health passport; sync your step totals; run clubs, events and challenges you join; issue and redeem rewards; send sign-in codes, invitations and service messages; prevent fraud, abuse and automated sign-ups; answer your requests; and meet legal obligations.

If your employer uses MedBuk+, we prepare collective figures for it. Employers never see an individual's health records, steps or readings. Figures for groups smaller than five people are not shown.

If you turn on app activity measurement, we use it only to understand how many people use MedBuk+ and which features they use, in aggregate.

We do not sell your personal data. We do not use your health information, or any data from Apple Health or Health Connect, for advertising, marketing or data mining, and we do not use it to decide eligibility for employment, insurance or credit. We do not use your data to train AI models.

MedBuk+ records and organises information. It does not interpret readings, diagnose, or recommend treatment.

Health information is sensitive personal data. We process it with your explicit consent, which the app asks for before you store health records. You may withdraw consent at any time; records that depend on it then stop being collected, and you can delete them or your account.

Account details are needed to provide the service; without them we cannot create an account. Health records, photos, profile details, challenge sharing, notifications and app activity measurement are optional. Declining an optional item only makes that feature unavailable.

Photo analysis is optional. Before your first photo, the app asks for your consent. The photo is sent through OpenRouter to Microsoft Azure servers in the United States to read the values or identify the meal. We require these providers to apply zero data retention, no model training and no prompt logging. You review and confirm every value before anything is saved; nothing is saved from recognition alone.

Food photos are not kept by MedBuk+ after analysis. Blood pressure and glucose meter photos are encrypted with a separately held key and kept for up to 30 days as evidence of the reading, then deleted. You can always type readings in yourself instead. We do not send identity cards or laboratory reports to these providers.

Sharing with other members is off by default. Your profile, challenge progress and any public listing are visible to others only after you choose to share them, and the app tells you what will be visible and to whom.

Activity cards: you can share a preset card to a club you belong to, either one day's step total (with its source, Apple Health or Health Connect) or one meal summary (time, estimated calories and number of items). You choose and confirm each card; nothing is shared automatically. A card is reviewed before it appears, is visible only to current members of that club, shows your profile alias only if your profile is approved, and can be withdrawn at any time. Readings and mood check-ins cannot be shared. There are no free-text posts.

Mood check-ins are private to you. They are stored with a separate consent, protected so that only your own signed-in account can read them, and never shared with employers, clubs, practitioners or other members, used for analytics, or used to earn points or rewards. Editing keeps earlier versions in your private history; deleting a check-in erases it and its versions.

Push notifications are optional and can be turned off by category or on your device. Notifications contain only general wording and a reference, never health readings, mood, medical leave details or other health information.

Service providers that run MedBuk+ for us, only for that purpose: Railway (application servers, database and encrypted backups, Singapore); Vercel (websites and web app, Singapore region); OpenRouter and Microsoft Azure (photo analysis with your consent, United States); Resend (email delivery of sign-in codes and invitations); Cloudflare Turnstile (a security check against automated abuse during sign-in); Apple and Google (if you choose Sign in with Apple or Google sign-in); and Expo, which passes notifications to Apple Push Notification service and Firebase Cloud Messaging (only if you allow notifications).

Your employer receives only collective figures, plus medical leave details you choose to submit to it. Joining a company workspace does not share your health passport.

A healthcare practitioner can see your records only if you approve their request in the app. You see the requested scope before approving, access lasts at most one hour, and you can revoke it. Records a practitioner adds identify that practitioner.

Merchants receive the details needed to honour a reward you claim, such as the voucher code and claim status. They do not receive your health information.

We disclose information to authorities only where the law requires it, or to protect someone's safety. If our business is reorganised or transferred, your information would remain protected by this policy.

Our main servers and backups are in Singapore. Some providers listed in section 6 process data in other countries, including the United States and Japan. We use providers that contractually protect personal data, limit what we send to what each task needs, and for photo analysis require zero retention. We transfer personal data outside Malaysia only as permitted by the Personal Data Protection Act 2010.

We keep your account and records while your account is open. When you delete your account, we erase it within 30 days, as described on our Account Deletion page.

Specific periods: food photos are not kept after analysis; meter photos are kept for up to 30 days; photo-analysis jobs are cleared within 24 hours; medical leave certificate photos are kept for up to 90 days; app activity measurement is separated from your account after 90 days; sign-in code delivery records are kept for 30 days; and the private receipt for a deletion request can be checked for 30 days.

Encrypted backups are taken about every 20 hours and the most recent 30 are kept, so deleted data can remain in a backup for about 25 days. If we ever restore a backup, we first re-apply every deletion request before it is used.

Some records are kept after account deletion because we have a legal or safety reason: reward, points and transaction history; security and audit logs; records written by healthcare practitioners; evidence that you accepted our terms; moderation decisions and reports; and blocks other members placed on your account. They are linked only to an internal identifier, are not used for any other purpose, and are deleted when that reason ends.

We encrypt data in transit, encrypt meter photo evidence with a separately held key, restrict database access by role, keep append-only audit logs of significant actions, and require a recent sign-in for sensitive changes such as account deletion. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

Under the Personal Data Protection Act 2010 you can ask to access or correct your personal data, ask for a copy of it, withdraw consent, limit how we process it, and ask us to stop direct marketing. Email support@vigordigital.org. We may ask you to confirm you own the account first. We answer access and correction requests within 21 days, as the law requires.

In the app you can change your privacy choices, stop step access in iPhone Settings or Health Connect, turn notifications off, turn app activity measurement off, and delete your account at Settings → Delete account. Deleting your MedBuk+ account does not delete data that remains in Apple Health, Health Connect, or your Apple, Google or email accounts.

If you are unhappy with how we handle your data, contact us first. You may also complain to the Personal Data Protection Commissioner of Malaysia.

MedBuk+ is not a medical device and does not provide medical advice, diagnosis or treatment. Speak to a qualified healthcare professional about your health. Do not use MedBuk+ for emergencies.

Each version of this policy has a version number and effective date, and earlier versions remain available on this website. We will tell you about material changes in the app before they take effect. A change never authorises a new use of data you shared earlier without asking you.

Axcel Healthcare Sdn. Bhd. (registration 202001017559 (1373879-U)), G-5 & G-6, Blok Anggerik 1, Jalan Berkat 15, Taman Malim Jaya, 75250 Melaka, Malaysia. Email: support@vigordigital.org. A Bahasa Malaysia version of this policy is available; if the versions differ, you may rely on either.