Privacy policy
Data controller
Abdullah Shbat, Hannovergasse 17, 1200 Vienna, Austria. Email: info@medilango.com.
Protecting your personal data matters to us. We process your data exclusively on the basis of the GDPR and the Austrian Data Protection Act (DSG).
Legal bases
- Art. 6(1)(b) GDPR — performance of contract (providing your account and the app's features)
- Art. 6(1)(a) and Art. 9(2)(a) GDPR — your explicit consent (e.g. health-related data, doctor profile)
- Art. 6(1)(c) GDPR — legal obligations (e.g. retention of invoices)
- Art. 6(1)(f) GDPR — legitimate interest (security, abuse prevention, technical operation)
What data we process — by user type
- Visitors without an account (guest mode): only technically necessary data (e.g. IP address in server logs, language preference on your device). No tracking takes place.
- Patients with an account: name, email address, preferred language, plus your doctor connections and community memberships — to provide the app's features.
- Doctors: additionally profile data (specialty, address, languages, opening hours, photo) and verification documents (e.g. ÖÄK number, ID documents) for authenticity checks.
Publicly visible doctor profiles
The publicly displayed profile data of doctors (name, specialty, address, languages, opening hours) is not taken from public registers. Registration with Medilango is voluntary: doctors create their profile themselves and explicitly consent to the publication of this information when signing up (Art. 6(1)(a) GDPR). The profile can be deactivated or deleted at any time.
Health-related data
Your list of connected doctors may indirectly reveal information about your health. We process this data solely to provide the service, based on your explicit consent (Art. 9(2)(a) GDPR), and never pass it on.
Optional email news
Doctors may voluntarily consent, separately from registration, to receive occasional Medilango news and product tips by email (Art. 6(1)(a) GDPR). We do not send these messages without consent. Essential account and security emails are unaffected. As evidence, we store the time, source and text version of the consent and any later withdrawal. Consent can be withdrawn at any time in account settings with future effect; the current status is checked before every optional mailing.
Voluntary campaign attribution
During doctor signup, a post ID (for example LI-01, IG-01 or WA-01) may be selected voluntarily to help us understand which Medilango-owned post contributed to a registration (Art. 6(1)(f) GDPR). The field is not required. We store only the selected post ID with the doctor profile and show admins aggregate counts only. Names and contact details are not copied into the manual campaign table.
Invitation links for doctors
Verified doctors may voluntarily share a random invitation link. The link contains neither names nor email addresses. If a colleague independently registers through it, we store the identifiers of both doctor profiles and the attribution time to provide the invitation feature (Art. 6(1)(b) GDPR). The inviting doctor sees only the aggregate registration count, not the identity of registered people. Medilango does not use this feature to contact anyone without a request.
Processors and recipients
| Service provider | Purpose | Location |
|---|---|---|
| Resend (Resend, Inc.) | Sending essential account emails and, only with separate consent, occasional news | USA |
| Replit (hosting provider) | Operating the app, database and file storage | EU/USA |
| OpenFreeMap / unpkg CDN | Providing map data when the map view is loaded — your IP address is technically transmitted in the process | EU/USA |
We do not sell your data and do not share it for advertising.
Transfers to third countries
Where providers are located in the USA, transfers are safeguarded by the EU standard contractual clauses and/or the EU–US Data Privacy Framework (Art. 44 et seq. GDPR).
Retention periods
- Account data: until you delete your account. You can delete it yourself at any time in the settings.
- Invoices: 7 years from the end of the calendar year (§ 132 BAO — statutory retention obligation, even after account deletion).
- Verification documents: until the review is completed or the doctor profile is deleted.
- Server logs: kept briefly for security purposes, then deleted automatically.
- Consent record (cookie choice): on your device until you change or delete it.
- Record of optional email consent: while the account exists; a withdrawal is stored together with the original record.
- Invitation attribution between doctor profiles: until either participating account is deleted.
Your rights
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
- Complaint to the Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at
Privacy contact
A data protection officer is not legally required and has not been appointed. For all privacy matters, contact us at info@medilango.com.
Updates to this policy
We update this privacy policy as needed (e.g. for new features or changed service providers). The version published here applies.
Last updated: September 2026.