MediShift — Privacy Policy
1. Who we are
MediShift (“the app”) is operated by FormuVet (“we”, “us”). For any privacy question, or to exercise any of the rights below, contact us at info@formuvet.com.
For the purposes of POPIA (South Africa) and the GDPR (UK/EU), we are the responsible party / data controller for the limited personal information described here.
2. What MediShift is — and what it is not
MediShift is a personal work and billing organiser for locum healthcare professionals. It records your shifts, the businesses you work for, what you invoice and what you're owed. It is not an accounting package, not a tax return, not a clinical or patient record, and not a substitute for your accountant or for the practice's own systems.
MediShift holds no patient or client information. There are no patient fields anywhere in the app. You are responsible for what you type into free-text fields such as booking notes — please do not enter identifiable patient or client information.
3. What we collect
a. Information you enter (your calendar and books)
Bookings (date, shift type, hours, rate, status, invoice state and your notes), the businesses or practices you work for (name, contact person, phone, email, address, agreed rate, distance and notes), invoices and their line items and payment records, receipts (category, amount, date and merchant — see 3c for photographs), your default rates and currency, and your invoicing profile — which includes your name, contact details, banking details and tax number if you enter them.
This is stored on your device. It is only copied to our servers if you sign in.
b. Account information (only if you sign in)
If you choose to sign in with Google, we receive your name, email address, profile photo URL and a Google account identifier, via Firebase Authentication. If you sign in with email and password, we receive your email address; your password is handled by Firebase and never visible to us. We use this solely to identify your account and sync your data between your devices. We never receive your Google password.
c. Receipt photographs
If you attach a photo to a receipt, it is resized and compressed on your device and stored there. Receipt photographs are never uploaded to our servers — they stay on the device that took them, and are included in the backup file you export. The receipt's other details (category, amount, date, merchant) do sync if you are signed in. We do not run any image analysis on your photos.
d. What we do not collect
No advertising identifiers. No analytics or usage tracking. No location, contacts, microphone, health data about you, or payment card information. MediShift is free and contains no ads and no in-app purchases. We never take payments through the app — invoices are paid directly to you by the businesses you bill.
4. Why we process it, and on what basis
We process your data only to provide the app: to store and display your calendar and invoices, and to sync them across your devices when you are signed in. Under the GDPR our lawful basis is performance of a contract with you (providing the app you asked for); under POPIA, processing is necessary to carry out the service you have requested and is done with your consent.
5. Who else touches your data
We do not sell, rent, or share your personal information with third parties for their own purposes. We use the following processor purely to run the service:
- Google Firebase (Authentication, Cloud Firestore, Hosting) — hosts your account and your synced calendar, invoices and receipts.
These services may process and store data on servers outside South Africa (including in the United States and the EU). Google provides contractual safeguards for such international transfers.
6. How long we keep it
Your records are kept for as long as you keep them. Data on your device stays until you delete it or uninstall the app. Cloud data stays until you delete your account. When you delete your account, your cloud data and your Firebase account are deleted immediately; residual copies in routine backups are cleared within 30 days.
7. Security
All traffic is encrypted in transit (HTTPS/TLS). Our database rules restrict every record to the account that created it, so no other user can read your calendar, invoices or banking details. No system is perfectly secure, but we keep the amount of personal information we hold deliberately small.
8. Your rights and your controls
In the app itself, at any time, you can:
- Export everything — a full JSON backup from the sidebar (Backup Data).
- Delete your account — permanently removes your account and all data, everywhere. See our account deletion page.
- Use the app with no account at all — sign-in is optional and the app is fully usable offline.
Under POPIA and the GDPR you also have the right to access, correct, erase, restrict or object to processing of your personal information, and to data portability. Email info@formuvet.com and we will respond within 30 days. You may also complain to the Information Regulator of South Africa, or to your local data protection authority in the UK/EU.
9. Children
MediShift is a professional tool intended for working healthcare professionals and students. It is not directed at children and we do not knowingly collect information from anyone under 18.
10. Changes
If we change this policy we will update the date at the top of this page and, for material changes, notify you in the app. Continuing to use MediShift after a change means you accept the updated policy.
11. Contact
FormuVet — info@formuvet.com