Privacy Policy

MedCounter is a pharmacy management app built for small Indian pharmacies. This policy explains what information we collect, why, and how we handle it, across both the medcounter.in website and the MedCounter mobile app (available on Google Play and the Apple App Store). The Service is operated from India by MedCounter Technologies, a sole proprietorship registered in India, which is the data fiduciary for the information described below.

1. The website contact form

If you submit the contact form on medcounter.in, we store:

• Your name and phone number (required, so we can reach you).
• Your city and shop name (optional, helps us understand demand by region).
• Anything you type in the message field (optional).
• A non-reversible hash of your IP address, used purely to rate-limit abuse. We do not store the raw IP.
• Your browser's user-agent string, used to debug submission issues.

We use this only to reply to your enquiry and to understand demand by region. It is never sold, rented, or shared outside the MedCounter team.

2. The mobile app

The app is a tool pharmacy owners use to run their shop. The data below is collected to provide that service to you, the account holder.

Account & sign-in

• You can sign in with Google. From your Google account we receive your name, email address, and profile picture. We do not receive your Google password and cannot access anything else in your Google account.
• On iPhone you can also Sign in with Apple. Apple shares your name (the first time only) and an email address, which may be a private relay address that forwards to your real one if you choose “Hide My Email”. We never receive your Apple ID password.
• When you set up your pharmacy, you provide business details: shop name, phone, and optionally drug licence number, GSTIN, and address. These appear on the bills you generate.

Data you enter to run your shop

As you use MedCounter, you create business records that we store on your behalf so they sync across your devices:

• Inventory and stock: medicines, batches, quantities, prices.
• Bills and sales: line items, totals, payment mode, returns.
• Customer details you choose to add: typically a name and phone number, so you can send a bill on WhatsApp or look up a customer's history. You control what you enter; please only add customer information you are permitted to keep.
• Suppliers and purchase orders.
• Prescription and patient details that pharmacy law requires you to record (for example for Schedule H1 medicines): prescriber and patient details, and optionally a photo of the prescription. This is health information about your customers; it is stored only for your shop and used only to provide these records to you.

This is your business data. We do not sell it or use it for advertising.

Camera and photos

• Barcode scanning: with your permission, the camera reads medicine barcodes so you can add items quickly. Only the barcode value is used; nothing is recorded.
• Bill and prescription photos: when you choose to photograph (or pick from your photo library) a distributor bill or a prescription, that image is uploaded and stored with your shop's records.
• The camera is never used in the background, and we never record video or audio.

Diagnostics & analytics

• Crash & error reporting: when the app errors or crashes, we collect a diagnostic report to fix bugs: device model, OS version, app version, and a technical stack trace.
• Product analytics: we record which screens and features are used, and basic device info, to understand how the app is used and improve it. This is tied to your account so we can support you, but is never sold or used for cross-app advertising.

Rewarded ads (Android app)

The Android app offers an optional way to earn extra bill-scan pages: you can choose to watch a short video ad. Ads play only when you tap to watch one. There are no banner or pop-up ads. These ads are served by Google AdMob, and when one plays:

• Google's ads software on your device receives your device's advertising ID, IP address, and basic device and app information, in order to serve the ad, measure it, and prevent fraud.
• We request non-personalised ads only, so the ads you see are not based on your interests or browsing history.
• To credit the reward to the right shop, Google is given an internal ID for your shop. It is not your name, phone number, or email. None of the business data you enter (stock, bills, customers, suppliers) is ever shared with Google AdMob or any advertiser.

Google handles this data under its own privacy policy: see how Google uses information from apps that use its services. You can reset or delete your advertising ID at any time in your Android settings (Settings → Google → Ads, or Settings → Privacy → Ads).

Payments

MedCounter is a paid subscription, with a free trial period for new pharmacies. Depending on where you subscribe, payment is processed by Google Play (Android app), the Apple App Store (iPhone app) or Razorpay, a licensed Indian payment provider (website). Each handles your card / UPI / bank details directly under its own privacy policy. We never see or store your payment credentials. We store only your plan, subscription status, payment records (amount and date) and the store's reference ID.

3. Who processes your data

We use a small number of specialist service providers to run MedCounter. They act as our processors: they may use your data only to provide their service to us, are bound by contract, and may not use it for their own purposes.

• Cloud hosting, database and file storage: stores your account, your shop's records, and files such as bill PDFs.
• Error diagnostics: receives crash and error reports so we can fix bugs.
• Product analytics: receives usage events as described above.
• Website hosting: serves medcounter.in and sees standard, anonymous request metadata.
• Google Play, Apple App Store and Razorpay: payment processing. We name them because you enter your payment details with them directly, under their own privacy policies.
• Google AdMob: serves the optional rewarded ads in the Android app, as described above, under Google's own privacy policy.

Each pharmacy's data is isolated so one shop can never see another's. We do not sell, rent, or trade your data, and we do not share your business data with advertisers or data brokers. The only data an ad network receives is what is described under “Rewarded ads” above. If you need the identity of a specific processor for your own compliance records, email [email protected] and we will tell you.

4. How long we keep it

We keep your account and business data for as long as your account is active. If you ask us to delete your account, we remove your pharmacy's data within 30 days, except where we must retain certain records (e.g. transaction/invoice records) to meet Indian legal and tax obligations.

5. Your rights

You can ask us at any time to:

• Show you the data we hold about you or your pharmacy.
• Correct or update it.
• Delete your account and associated data.
• Stop contacting you for marketing.

Email [email protected] and we'll act on it within 30 days. To request account deletion, write to the same address with the email you signed up with.

6. Delete your account

You can delete your MedCounter account (Android and iOS app in.medcounter.app, and the web app at app.medcounter.in) and your pharmacy's data at any time, from inside the app. Here's how, and exactly what is deleted or kept.

What happens when you delete:

1. If you own the shop: your plan is cancelled and the shop is locked at once. 30 days later the shop, all of its data and your login are permanently deleted. Changed your mind before then? Sign in and choose “Keep my shop”. Download your bills and registers from Reports first; they are yours to keep.
2. If you are staff (manager or cashier): your login is deleted immediately. The shop's bills and stock stay with the shop.
3. Subscriptions bought through the App Store are billed by Apple and can only be cancelled by you, in your Apple ID subscription settings. The app links you there.

What gets deleted: your account and sign-in identity (name and email from Google or Apple sign-in), shop/pharmacy profile and settings, inventory and stock batches, customers, bills and sales history, and the analytics/diagnostics identifiers linked to your account.

What we keep, and for how long: where Indian law requires it, for example the GST invoices we issued to you for your MedCounter subscription and their payment records, we retain those specific records for the legally mandated period (currently up to 8 years for tax records), after which they are deleted. Backups containing your data are purged within 30 days of deletion. We never sell your data.

7. Children

MedCounter is a business tool intended for pharmacy owners and staff. It is not directed at, and we do not knowingly collect data from, anyone under 18.

8. Website cookies & analytics

The medcounter.in website sets no tracking cookies and does not fingerprint your browser. There is no third-party advertising, no Google Analytics, and no Facebook pixel on the website. Our website host keeps standard, anonymous request logs to serve the site and protect it from abuse.

9. Changes to this policy

We'll update the "Last updated" date above whenever this page changes meaningfully, and notify active users in-app or by email for material changes.

10. Contact

MedCounter · [email protected]