# Terms of Service & Privacy Policy — MediScan AI

**Last Updated:** April 20, 2026
**Developer:** Yash

---

## 1. Nature of the Service

MediScan AI is an **educational and informational tool** that uses artificial intelligence (Google Gemini API) to help users understand medical lab reports. It is a student portfolio project and is **NOT** a licensed medical device, diagnostic tool, or healthcare service.

## 2. Medical Disclaimer

> **⚠️ IMPORTANT:** MediScan AI does **NOT** provide medical diagnoses, treatment recommendations, or professional medical advice. All analysis results are AI-generated approximations for informational purposes only.

- **Always consult a qualified physician** before making any health decisions.
- **Never disregard professional medical advice** based on information from this application.
- The developers are **not liable** for any actions taken based on AI-generated output.
- AI models can produce **incorrect, incomplete, or misleading** results.

## 3. Data Privacy

### What We Collect
- **Nothing on our servers.** MediScan AI runs entirely in your browser.

### Where Your Data Goes
| Data Type | Storage Location | Duration |
|---|---|---|
| Gemini API Key | Your browser's `localStorage` | Until you clear it |
| Analysis history | Your browser's `localStorage` | Until you clear it |
| Current analysis | Your browser's `sessionStorage` | Until tab is closed |
| Uploaded reports | Sent directly to Google Gemini API | Not stored by us |
| Firebase auth credentials | Firebase Authentication servers | Per Firebase terms |

### Third-Party Services
- **Google Gemini API:** Your uploaded reports are sent to Google's Gemini API for analysis. Google's [Terms of Service](https://ai.google.dev/terms) and [Privacy Policy](https://policies.google.com/privacy) apply.
- **Firebase Authentication:** If you create an account, Firebase handles credential storage per [Firebase Terms](https://firebase.google.com/terms).

### What We Do NOT Do
- ❌ Store your medical reports on any server
- ❌ Share your data with third parties (beyond Gemini API processing)
- ❌ Track your usage with analytics cookies
- ❌ Sell or monetize your health data

## 4. HIPAA & Regulatory Compliance

MediScan AI is **NOT HIPAA-compliant** and is not intended for use in clinical settings. It is a student educational project. Do not use this application for actual medical decision-making.

## 5. Data Retention

- All data is stored **locally in your browser**. You can delete it at any time by clearing your browser's local storage.
- `localStorage` data persists until manually cleared.
- `sessionStorage` data is cleared when you close the browser tab.
- We have no ability to access, retrieve, or delete your locally stored data.

## 6. Limitation of Liability

To the maximum extent permitted by law, the developers of MediScan AI shall not be held liable for:
- Any harm resulting from reliance on AI-generated analysis
- Incorrect, incomplete, or misleading AI output
- Loss of data stored in browser storage
- Service interruptions caused by third-party API outages
- Unauthorized access to locally stored data

## 7. User Responsibilities

By using MediScan AI, you agree that:
- You understand this is an educational tool, not a medical device
- You will not use this as a substitute for professional medical advice
- You are responsible for the security of your own device and API keys
- You will not attempt to abuse the application or its APIs

## 8. Changes to These Terms

These terms may be updated at any time. Continued use of the application after changes constitutes acceptance of the updated terms.

## 9. Contact

For questions about this project, reach out to the developer through the project's repository.

---

*MediScan AI — Made by Yash, Made for the World* ❤️