Privacy Policy
Medi Siha (“the App”, “we”, “us”) is a personal health record-keeping app published by Smartvibes (smartvibes.com.au). This policy explains what information the App handles, how it is stored, and the limited circumstances in which it leaves your device. It is written to align with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
1. Who is responsible
Smartvibes is the provider of the App. Because your data is stored locally on your own device and we operate no server that receives it, in everyday use you are the custodian of your information. For questions, contact us via smartvibes.com.au.
2. What information the App handles
You may enter or capture the following, all of which is stored locally on your device:
| Category | Examples |
|---|---|
| Patient profile | Name, date of birth, sex, blood type, height, weight, notes |
| Health information (sensitive) | Medications, dosages, schedules, dose history, allergies, conditions, medical-history entries |
| Identifiers (sensitive) | Medicare number/IRN and private health-fund membership details, if you add them |
| Images | Photos of prescriptions, medications, and cards you capture or select (a medication can have its own photo) |
| Prescriber | Doctor / clinic name captured from a scan or entered manually |
Health information and government identifiers are “sensitive information” under the Privacy Act. The App collects them only because you choose to enter them, and uses them only to provide the App’s record-keeping features to you.
3. Where your data is stored
All of the above is stored locally on your device using your device’s app storage. We do not maintain a user account system and we do not upload, sync, or back up your records to any Smartvibes server.
3a. Not an official health record
Medi Siha is your own personal copy only. It is not connected to, and is not a replacement for, My Health Record, Medicare / Services Australia records, the PBS, or any hospital, GP or pharmacy system — the official record of your care is the one your healthcare providers keep. Treat Medi Siha as a personal record-keeping aid, not an authoritative or complete medical record.
4. Information that leaves your device (only when you act)
AI scanning. When you choose to scan a prescription, medication, Medicare card or health-fund card, the App sends only that image to Google’s Gemini API (Google Generative Language API) for the sole purpose of reading the text in the image and returning structured details for you to review. This happens only at the moment you start a scan; your broader records are never sent. If you never scan, no image is ever sent.
Optional drug lookups. If “Online drug lookups” is enabled (Settings → Privacy), the App sends only the medicine name you type or open to public drug databases — the U.S. National Library of Medicine (RxNorm / RxNav) for name suggestions, and openFDA for official label and interaction information. No account or identity is attached. You can turn this off, which fully disables suggestions and label lookups and keeps everything on your device.
AI Health Assistant. The assistant is an artificial-intelligence chatbot powered by Google’s Gemini — not a person and not a doctor. To answer you, it reads and parses through the health information you have stored: a short summary of your relevant records (medications, conditions, allergies and recent history) is combined with your typed question and any photo you attach, and all of it is sent to Google’s Gemini API to generate a reply that is returned to your device. This happens only when you send a message; an attached photo is not stored unless you separately save it to a medication. Because it is AI interpreting your data, its answers can be wrong, incomplete or out of date — it is a general-information tool, not medical advice, and must not be relied on in place of your doctor or pharmacist. Do not send more than you are comfortable sharing with Google. See the disclaimer below and our Terms & Conditions.
Apart from these, and any backup or summary you choose to export or share, your data stays on the device. We use no analytics, advertising, or third-party tracking SDKs.
5. Device permissions
- Camera & photo library — to capture or select prescription, medication and card images, or a photo you send to the AI assistant. Images you save (including a medication’s photo) are copied into the App’s private storage on your device.
- Notifications — to deliver the medication reminders you set. Reminders are scheduled locally on your device.
You can grant or revoke any permission in your device settings at any time. Denying a permission only disables the related feature.
6. What we do NOT do
- No account, login, or user profile on our servers.
- No analytics, advertising, tracking, or third-party marketing SDKs.
- No selling, renting, or sharing of your personal information.
- No background collection — the App only does what you ask, when you ask.
7. Sharing and exporting
The App can generate a PDF patient summary and a ZIP backup of your records. These are created on your device and shared only through the share options you trigger (for example, to send to your doctor). Once you share a file, where it goes and who can access it is determined by you and the app or service you send it through.
8. Service providers
We rely on a small number of providers that process data only as needed to make features work: Google (Gemini API — for images you choose to scan, and for messages/photos you send to the AI assistant), the U.S. National Library of Medicine (RxNorm/RxNav) and openFDA (only the medicine name, and only when online drug lookups are enabled), the Apple App Store / Google Play (app distribution), and Expo / EAS (build and over-the-air app updates; these deliver app code, not your personal records). We do not send your health records to any of them.
9. Security
Your data is held within the App’s private storage area on your device and is subject to your device’s own protections. We strongly recommend protecting your phone with a passcode or biometric lock, since your health records and any identifiers live on the device.
10. Your rights & deleting data
You can view, edit, export and delete all of your data at any time within the App (Settings → Data Management, or by deleting an individual medication or patient). Deletion is immediate and permanent: deleting a patient removes all of that person’s records and photos, and “Delete All Data” wipes everything on the device. Because we hold no copy on any server, deleted data cannot be recovered by us or by you unless you exported a backup beforehand — so consider exporting a backup or PDF first. Uninstalling the App also removes your data from the device, and there is nothing further for us to access, correct, or delete on your behalf.
11. Children
The App is not directed at children under 13, and we do not knowingly collect information from children. A parent or carer may use the App to record a dependant’s information at their own discretion.
12. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and within the App.
13. Disclaimer
Medi Siha is an independent app and is not affiliated with, endorsed by, or connected to Medicare, Services Australia, My Health Record, the PBS, any private health fund, pharmacy, hospital, or healthcare provider, and it is not an official health record or a replacement for the records those providers and systems keep. It is a record-keeping tool and does not provide medical advice; nothing in the App, including its AI features, is a substitute for your doctor or pharmacist or should be taken in place of their advice. See our Terms & Conditions.
14. Contact
Questions about privacy? Visit www.smartvibes.com.au.