Privacy & Data Security
Your health data is your most private property. We treated it with the highest levels of security and transparency.
1. Introduction
At MySimpleReport (MSR), we believe you have a right to understand your healthcare data without sacrificing your privacy. This policy explains how we collect, use, and protect your information when you use our medical report analysis platform.
Our Core Promise
We do not sell your personal health data to third parties. Period. Our business model is based on providing value to you, the user—not monetizing your private medical information.
2. Information We Collect
To provide our AI-powered analysis service, we collect the following types of information:
- Personal Information: Name, email address, and account credentials.
- Medical Reports: The documents you upload (PDFs, images, text) for analysis.
- Usage Data: Information on how you interact with our platform to help us improve performance and security.
3. Cookies & Tracking Technologies
This section describes cookies used on the MySimpleReport website (mysimplereport.com). It does not apply to the MySimpleReport iOS app.
The iOS app does not use cookies, analytics SDKs, or advertising trackers. It does not track you across other apps or websites, and it does not collect data for advertising or marketing purposes. The app communicates only with our own servers and, for report analysis, with Google Gemini as described in Section 6.
On our website, we use a small number of cookies to run the site and, only with your permission, to understand how it's used. When you first visit, a banner lets you Accept all or Reject non-essential cookies — you can change your choice at any time via the Cookie Settings link in the footer.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
msr_cookie_consent |
Strictly necessary | Remembers your cookie preference (accepted/rejected) so we don't ask again every visit. Always set, since it's what makes your choice possible in the first place. | 1 year |
_ga |
Analytics (Google Analytics) | Distinguishes visitors for usage analytics. Set only after you accept analytics cookies. | Up to 2 years |
_ga_2P43JF35LE |
Analytics (Google Analytics) | Persists session state for our Google Analytics property. Set only after you accept analytics cookies. | Up to 2 years |
_GRECAPTCHA |
Security | Set by Google reCAPTCHA on our sign-up and contact forms to help distinguish real visitors from bots and prevent abuse. | Up to 6 months |
Strictly necessary and security cookies do not require consent and are always set. Analytics cookies are set only if you click "Accept all." Again, none of these cookies are used by the iOS app.
4. How We Use Your Data
Your data is strictly used to:
- Generate simplified, plain-language summaries of your medical reports using our AI models, including Google Gemini as our third-party AI provider (see Section 6).
- Provide personalized health insights based on your historical data trends.
- Securely store your records in one centralized location for your own access.
- Improve the accuracy and reliability of our medical translation engine (using de-identified/anonymized data).
5. Data Security & Compliance
Security is the foundation of everything we build. We implement bank-level security measures to ensure your data stays safe.
256-bit Encryption
All data is encrypted both in transit and at rest using industry-standard protocols.
6. Third-Party Sharing
We do not sell your medical data or share it for marketing purposes. We do share your report content with the following categories of third-party providers, solely to operate the Service:
- AI Analysis Provider: The content of your uploaded report is securely transmitted to Google Gemini, a trusted third-party AI provider, to generate your plain-language explanation. Gemini processes this data solely to produce your analysis — it does not use your submitted content to train public AI models, and does not share it with unauthorized parties. We have verified that Gemini maintains administrative and technical safeguards that provide the same or equal protection of user data as described in this policy. Report content sent to Gemini is not retained beyond what's needed to process your request.
- Infrastructure Providers: Encrypted cloud storage and hosting providers necessary to run the Service.
All third-party providers are contractually bound to privacy and security standards equal to our own.
SMS/Text Messaging: MySimpleReport does not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Phone numbers and SMS opt-in status collected for text message notifications are used solely to send you the account and report notifications you've opted into, and are never sold or shared with third parties for marketing purposes. See our Terms of Service for the full SMS Terms, including opt-out instructions.
7. Your Rights & Control
You have full control over your data at all times:
- Access: You can download your reports and summaries at any time.
- Deletion: You can permanently delete any report or your entire account with a single click. When you delete data, it is removed from our active servers instantly.
- Portability: You have the right to request a copy of all your data in a machine-readable format.
- Withdraw Consent: You can withdraw your consent to AI analysis at any time in the app under Profile → User Agreement by unchecking the consent box. Once withdrawn, no further report content will be sent to our AI analysis provider and report analysis will be unavailable until you consent again. Your existing reports remain in your account until you choose to delete them.
8. Data Retention
We retain your personal information and medical report data for as long as your account remains active, in order to provide the Service.
- Active accounts: Your reports, uploaded documents, and account data are retained for as long as you maintain an account with us. We do not automatically delete data from your account due to inactivity — it is kept until you delete it or close your account.
- Deletion: When you delete a report or your account, it is removed from our active, production servers immediately. Residual copies may persist in encrypted backups for up to 35 days (our automated backup retention window), after which they are permanently purged.
- Legal & compliance retention: We may retain certain records — for example billing/transaction records and security audit logs — for up to six years where required by law, tax, accounting, or HIPAA recordkeeping obligations, even after account or report deletion.
- De-identified/aggregated data: Anonymized or aggregated data used to improve our AI models is not tied to your identity and is not subject to individual deletion requests.
9. Subscription & Payment Details
MySimpleReport is offered through a free trial followed by a paid subscription. A payment method is collected when you sign up and is charged automatically when your free trial ends, unless you cancel before then.
- Free Trial: 3 days or 2 free reports, whichever comes first — no charge during this period.
- Monthly Plan: USD 4.99, billed automatically every month.
- Annual Plan: USD 49.99, billed automatically once a year.
You can cancel your subscription at any time from your account settings. Cancelling stops future billing but does not end your current trial or billing period early — you keep access until it naturally ends. Current pricing is also always available on our Pricing page.
10. Contact Us
If you have any questions regarding this Privacy Policy or how we handle your data, please contact our Data Protection Officer at:
support@mysimplereport.com