MedRep — Privacy Policy

Last updated: 5 July 2026

MedRep is a business (B2B) field-force management application used by the authorized employees of a licensing pharmaceutical/healthcare company (the "Company"). It is not a consumer app and is not intended for the general public. Accounts are created and controlled by the Company. The Company is the data controller of the information processed through MedRep; the app operator provides the platform on the Company's behalf.

Information we collect

• Account information — name, email, phone and role, provisioned by the Company.
• Location data — GPS coordinates, accuracy and a mock-location flag are captured only when a user performs a work action (check-in/out, visit attend/leave) and, if enabled by the Company, as a route breadcrumb during working hours, for the purpose of verifying field activity.
• Work content — visits, plans, sales orders, samples, requests, deliveries, proof photos/signatures, survey answers and notes that the user submits.
• Device data — a push-notification token and basic diagnostics/crash data to operate and improve the app.

How we use it

• To provide the service: plans, visits, attendance, sales, approvals, deliveries, reports and notifications.
• To verify field activity and detect falsified locations (anti-fraud).
• To send operational notifications (approvals, status changes, reminders).
• To maintain security, diagnose problems and improve reliability.

We do not sell personal data and do not use it for advertising.

Sharing

Data is visible to the Company's authorized users (e.g. the employee's supervisor and managers) as required to run the field operation. We use trusted processors only to operate the service — cloud hosting (DigitalOcean), file storage, email delivery (SendGrid), push notifications (Google Firebase) and error monitoring (Sentry) — bound by confidentiality and data-processing terms. We may disclose data if required by law.

Retention

Data is retained for as long as the Company maintains its MedRep account and as required for legitimate business and legal purposes, then deleted or anonymized.

Your rights

Because accounts are managed by the Company, requests to access, correct or delete personal data should be directed to your employer (the Company), who will coordinate with us. You can disable location and notification permissions at any time in your device settings (some features will stop working).

Security

Data is encrypted in transit (HTTPS/TLS). Access is role-based and least-privilege. Uploaded media is stored privately and served via short-lived signed links.

Children

MedRep is for adult professional users only and is not directed to children.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

For privacy questions, contact your employer's MedRep administrator, or the app operator at [email protected].