Legal
Privacy Policy
MedPull turns the signals from your phone, your watch and your check-ins into something your care team, your coaches or you can act on. That only works if you trust us with sensitive information. This page says, in plain words, what we collect, where it goes, who can see it and what you can do about it.
1. Who we are
MedPull ("MedPull", "we", "us") builds the MedPull app for iPhone and the MedPull console used by clinics and athletic programs. You can reach us at hello@medpull.org.
2. The three ways MedPull is used
The same app serves three kinds of people, and what happens to your data depends on which one you are.
- Recovery with a care team. Your surgeon's office invited you. The app follows your recovery after a procedure, and the people on your care team see what you share with them.
- MedPull Personal. You subscribed on your own. The app reads your watch and gives you readiness, training load, sleep and recovery readouts, a daily plan and a coach. Nobody at any clinic sees this space unless you pair it with a clinic record.
- MedPull Sports. Your team or athletic program enrolled you. Your readiness and load are visible to the program staff your team names, such as athletic trainers and strength coaches.
3. What we collect
Account
Your name, email address, phone number, the procedure or sport you tell us about, your goals, and a password for MedPull Personal and Sports accounts. Passwords are stored only as a salted hash; we never see them in clear text.
Health and activity data
With your permission, the app reads from Apple Health or a connected wearable: steps and distance, walking metrics, sleep, heart rate, heart rate variability, resting heart rate, blood oxygen, breathing rate, wrist or skin temperature, workouts and fitness estimates. Which types are read is shown to you in the iOS permission screen, and you can change it at any time in the Health app.
What you tell us in the app
Check-in answers such as pain and sleep ratings, tasks you mark done, notes, questions you ask the coach or assistant, and anything you send your care team, including photos, short videos and voice notes you choose to attach. Voice is transcribed on your phone or through Apple's speech service; the microphone is only on while you are recording.
Motion and location during a measurement
During a guided walk, a stair test or a joint measurement the app records your phone's motion sensors so your care team can see how you are walking and moving. On an outdoor walk it uses your location only to measure the distance you covered. We never track your location at any other time.
Purchases
Subscriptions are billed by Apple. We receive a signed receipt that says which plan is active and until when. We never receive your card number.
Device and diagnostics
App version, iOS version, device model and anonymous crash and error logs, so we can fix what breaks. We do not use advertising identifiers and we do not fingerprint your device.
4. How we use it
- To run the app for you: compute your readouts, show your progress, send your check-ins and tasks, and let your care team or coaches follow you.
- To write your readouts with AI. Your morning brief, deep dives and coach replies are written by a large language model from your numbers. Only the numbers and notes needed for that readout are sent to the model provider, and the result is stored with your account so you can read it again.
- To text you, if you turn texts on: a check-in link, a task, your morning brief. Reply STOP to any text to switch them off.
- To improve MedPull, only if you agreed to the optional research permission on the consent form: analysing data and AI results in de-identified or aggregate form to make the readouts, the models and the product better.
- To keep the service safe: detecting abuse, securing accounts and meeting legal obligations.
We do not sell your data. We do not use it for advertising, and we do not share it with data brokers, advertisers or analytics platforms.
5. Who can see it
People you are connected to
- Your care team, when a clinic invited you: the surgeon, physician assistants, nurses and physical therapists on your record see your readouts, check-ins, messages and attachments.
- Your program staff, when a team enrolled you: the trainers and coaches your program names see your readiness, load and the notes you share with them.
- Nobody else, for a MedPull Personal space, unless you choose to pair it with a clinic record. Then only that clinic sees the data the pairing shares, and you can unpair at any time.
Service providers
Companies that help us run MedPull receive only what they need to do their job, under contracts that forbid any other use:
| Provider | What they do | What they receive |
|---|---|---|
| Amazon Web Services | Hosting and encrypted storage, United States | Everything stored in the service |
| Junction (Vital) | Reads Apple Health and wearable data for the app | Your health and activity data and an account identifier |
| Groq | Runs the language model that writes readouts | The numbers and notes behind a readout; never your name or contact details |
| Sendblue | Sends and receives texts | Your phone number and the text content |
| Apple | App Store billing and speech recognition | Purchase status; audio for transcription when you dictate |
When the law requires
We disclose information if a court or law requires it, or to protect the safety of a person. We will tell you when we are allowed to.
6. Apple Health and wearable data
Health data is read only after you grant permission in iOS, and only the types you approve. MedPull never writes to Apple Health. Health data is used only to provide the features described here and, with your separate permission, to improve them. It is never used for advertising, marketing or any use-based data mining, and it is never sold or shared with advertisers or data brokers, consistent with Apple's HealthKit rules. You can revoke access at any time in the Health app under Sharing › Apps.
7. Where it is stored and for how long
Your data lives in encrypted storage on Amazon Web Services in the United States. It is encrypted in transit and at rest. MedPull Personal data is kept in storage separate from any clinic's patient records.
We keep your data while your account is active. When you delete your account, your account rows, files, readouts and exports are removed from the live service at once, and from backups within 30 days. A clinic may be required by law to keep the medical record that includes what you shared with your care team; that record belongs to the clinic, not to MedPull.
8. Your choices and rights
- Health permissions: change which data types the app may read in the Health app, or in iOS Settings under Privacy & Security › Health.
- Microphone, camera, motion and location: turn each off in iOS Settings under MedPull. The related feature stops; the rest of the app keeps working.
- Texts: reply STOP to any text, or switch them off in Profile.
- Research permission: withdraw it in Profile at any time without losing anything else.
- Export: download everything we hold about you from Profile.
- Delete: delete your account and its data from Profile at any time, or email us and we will do it for you within 30 days.
- Correct or ask: email hello@medpull.org to correct a record, ask what we hold or raise a concern. Depending on where you live you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, and we honour requests under them.
9. Children
MedPull is for adults, and for people 13 or older who use it with a parent or guardian's permission, for example an athlete on a school program or a patient recovering from surgery. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has an account, email us and we will delete it.
10. When a clinic uses MedPull
When your care team invited you, MedPull processes your information on behalf of that clinic as its service provider and business associate under HIPAA. The clinic decides who on its staff may see your data and how long its medical record is kept. The clinic's own Notice of Privacy Practices governs that record; this policy governs how MedPull handles the data as the clinic's provider.
11. Changes
When this policy changes in a way that matters, the app will show you the new version and ask you to agree before you continue. The effective date at the top always tells you which version you are reading.
12. Contact
MedPull · hello@medpull.org
See also the Terms of Use.