MedReport Privacy Policy
Privacy Policy
Clinitech LLC d/b/a MedReport
Last Updated: February 24, 2026
This Privacy Policy explains how Clinitech LLC, doing business as MedReport (“MedReport,” “we,” “us,” or “our”) collects, uses, discloses, and protects information about you when you use our websites, mobile applications, and related services (collectively, the “Services”).
Contact Us
Clinitech LLC (d/b/a MedReport)
1050 University Ave, E107-16
San Diego, CA 92103
Email: hello@medreport.com
Privacy: privacy@medreport.com
1) Scope
This Privacy Policy applies to information we process through the Services. It does not apply to information processed by third parties you may access through links or integrations (e.g., laboratories, imaging centers, payment processors, or wearable platforms) that have their own privacy practices.
2) Important Notes About Health Information and HIPAA
MedReport is a consumer-facing platform that may help you store, analyze, and visualize health-related information (including lab and imaging results). Depending on how you use the Services, some information you provide may be considered “health information,” “consumer health data,” or similar terms under certain state privacy laws.
HIPAA: MedReport is not a hospital or insurance company. In some circumstances (for example, if we provide Services on behalf of a HIPAA-covered provider or health plan), we may act as a “business associate” and handle certain information as protected health information (PHI) under HIPAA. If HIPAA applies to a specific interaction, you may receive a separate Notice of Privacy Practices from the covered entity or provider, and MedReport will process PHI as required by applicable agreements and law.
3) Information We Collect
We collect information in three main ways: (A) information you provide, (B) information we receive from third parties at your direction, and (C) information collected automatically.
A. Information you provide
Account & profile information: name, email, phone number, username, password, profile details, preferences.
Health and wellness information: lab results, biomarker values, imaging reports/measurements, symptoms, cycle-related information, medications/supplements, allergies, conditions, goals, and other health-related entries you choose to add.
Communications: messages you send to us (including support requests), feedback, survey responses, and any attachments (e.g., screenshots or files).
Payment and subscription information: subscription status and transaction metadata. Payment card details are typically processed by our payment processors; we may receive limited billing details such as the last four digits, expiration month/year, and payment confirmation.
B. Information we receive from third parties (with your permission or at your direction)
Depending on the features you enable, we may receive:
Laboratory or diagnostic data from lab partners or platforms you connect.
Imaging-related information from imaging providers or systems you connect.
Wearable/health platform data (e.g., activity, vitals) if you connect supported platforms.
Provider or practitioner inputs if you choose to share information with a clinician or import clinician-provided content.
C. Information collected automatically
Device and usage data: IP address, device identifiers, browser type, operating system, app version, timestamps, pages/screens viewed, clicks, referring/exit pages, crash logs, performance metrics.
Cookies and similar technologies: We and our service providers may use cookies, SDKs, pixels, local storage, and similar tools to operate the Services, understand usage, and (where enabled) support marketing.
4) How We Use Information
We use information for purposes such as:
Provide and operate the Services (create accounts, authenticate, deliver features, sync data, and maintain functionality).
Personalize your experience (preferences, dashboards, trends, reminders you configure).
Generate insights and summaries, including AI-assisted features (e.g., pattern detection, explanations, and content summarization).
We may use de-identified or aggregated data to improve our models and features.
Customer support and troubleshooting (respond to requests, debug issues, improve reliability).
Security and fraud prevention (protect accounts, detect misuse, enforce policies).
Communications (service notices, product updates, administrative messages; marketing communications where permitted—see your choices below).
Analytics and improvement (understand feature adoption, improve UI/UX, conduct internal research and development).
Legal compliance (respond to lawful requests, comply with applicable laws, protect rights and safety).
5) How We Disclose Information
We may disclose information as follows:
A. Service providers and vendors
We share information with vendors who help us run the Services (e.g., hosting, cloud storage, analytics, customer support tools, email/SMS delivery, security monitoring, payment processing). They are permitted to use information only to provide services to us and as otherwise required by law.
B. Integrations you enable
If you connect third-party services (labs, imaging providers, wearables, etc.), we may share and receive information with those services as you direct and according to your settings.
C. With your consent or at your request
We may disclose information when you ask us to (for example, exporting data, sharing with a clinician, or sending a report to a third party you identify).
D. Affiliates and business transfers
We may share information with our corporate affiliates. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.
E. Legal and safety
We may disclose information to comply with law, court orders, subpoenas, or lawful requests; to protect rights, property, and safety; to investigate fraud or security issues; or to enforce our terms.
6) Advertising, Analytics, and “Sale/Share” Notices
We may use analytics services to understand how users interact with the Services. If we use marketing or advertising tools, they may involve sharing certain identifiers and usage data (e.g., cookie IDs, device IDs, IP address, events) with advertising partners.
We do not sell your health data for money.
Some data sharing for advertising measurement or cross-context behavioral advertising may be considered a “sale” or “share” of personal information under certain state laws, even if no money changes hands.
Choices: You can opt out of certain cookie-based tracking through our cookie controls (if available) and through browser/device settings. If required, we will provide a “Do Not Sell or Share My Personal Information” mechanism.
7) Your Choices and Controls
Depending on your location and how you use the Services, you may have the ability to:
Access, correct, or delete certain information in your account.
Export/download your information (where available).
Opt out of marketing emails by using the unsubscribe link; you may still receive non-marketing service messages.
Control cookies/SDKs through cookie settings (if offered) or browser/device controls.
Manage integrations by disconnecting third-party connections.
To make a request, contact privacy@medreport.com.
8) Data Retention
We retain information for as long as reasonably necessary to:
provide the Services you request,
meet legal, accounting, or reporting obligations,
resolve disputes, enforce agreements, and maintain security.
Retention periods vary depending on the type of data, how it is used, and legal requirements. We may retain de-identified or aggregated information for longer periods.
9) Security
We implement reasonable administrative, technical, and physical safeguards designed to protect information. However, no security measure is perfect, and we cannot guarantee absolute security.
10) De-identified and Aggregated Information
We may create and use de-identified or aggregated information (information that cannot reasonably be used to identify you) for purposes such as analytics, research, product improvement, and model training, as permitted by law.
11) Children’s Privacy
The Services are not intended for children. We do not knowingly collect personal information from children under 13, and we may limit availability to users under 18 depending on the feature set. If you believe a child has provided personal information, contact privacy@medreport.com.
12) International Users
If you access the Services from outside the United States, your information may be transferred to and processed in the U.S. and other jurisdictions where we or our service providers operate. Those jurisdictions may have different data protection laws than your location.
13) Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The “Last Updated” date shows when it was last revised. If changes are material, we may provide additional notice (e.g., in-app notice or email), as required by law.
14) Contact Us
Questions or concerns? Email privacy@medreport.com or write to:
Clinitech LLC (d/b/a MedReport)
1050 University Ave, E107-16
San Diego, CA 92103