Privacy

Short version: this website doesn't track you. It has no cookies, no analytics, and no access logs.

This page is about the website, medmemory.org. The site and the MedMemory app are made by Lynn Haas.

What this website does not do

• No cookies.
• No analytics, ads, or tracking of any kind.
• No outside scripts, fonts, or images. Everything loads from this site.

Server logs

This site runs on a small rented server. The web server software (Caddy) is not set up to keep access logs. That means it does not keep a list of who visited, their IP addresses, or which pages they viewed.

Like any website, your device's address passes through the server for a moment so it can send you the page. The server may keep its own short technical notes about things like errors and security certificates.

The early access and contact forms

The site has two forms: one to ask to join early access, and one to send a message. They are the only places the site asks you to type anything.

• What you send is stored on MedMemory's own server and emailed to MedMemory's own mail server. No outside company handles it.
• To limit spam, the server also keeps the name of your browser and a scrambled code made from your internet address (not the address itself).
• Your name, email address, and message are used only to reply to you, and to approve and set up testers.
• They are not sold or shared with anyone.
• Ask any time, and what you sent will be deleted.
• Please don't include medical details in a form.

The MedMemory app

The app is separate from this website. Your records are stored on your phone, encrypted, behind your PIN. There is no MedMemory account.

During early access the app's program files are served from this server, behind a tester sign-in. There are no cookies, no analytics, and no crash reports in the app.

For most testers, that is all the server does: it does not hold your records, photos, backups, or keys.

Server backup and family sharing (early testers, set up by us)

For a few early testers, we pair their phone with a MedMemory server feature called the hub. We do the pairing by hand, one person at a time. It is not self-serve yet. If your phone is not paired, it sends nothing to the hub.

For a paired phone, here is what the hub holds:

• A server backup is encrypted on your phone first, with your backup words. The hub stores it exactly as it arrives. It cannot open it. It also sees a small label on the file: the file format, the date, and how many profiles are in it.
• A family share is also encrypted on your phone first. The key to open it is in the link after the # sign, and a browser never sends that part to a server. So the hub does not have the key. The hub keeps the locked copy, what it covers, when it ends, the profile name shown on it, and a record of each request to view it, including the viewer's browser name.
• A family share lasts up to 7 days. The first person who opens a link claims it. A link preview, such as one a chat app makes, does not claim it. When a share ends or you revoke it, the hub deletes the locked copy.
• The hub also keeps a short event log, with event types, times, and share numbers, and a scrambled form of each paired phone's token.
• The hub does not hold anything it can read as a health record, a photo, or a document.

The hub can still see that a paired phone connected, when it did, how big the files are, and when a share link is opened. Anyone who has a complete family link, including the part after the # sign, can read that share until it ends. Send it only to the person you mean.

A clinic share, a read-only page for a clinic, is built but on hold. It is not offered to testers yet.

Outside services the app can use

The app talks to a few outside services only when you use a feature that needs them: free public U.S. government drug lists (for looking up a medicine), openFDA (for the label cross-reference), and a photo-reading service, only if you connect one and agree. Reading a screenshot or a scanned page on your phone sends nothing out. The first time you use it, the phone downloads its reading files from this server. If you try the Epic test sign-in, a test setup with made-up patients, the phone talks to Epic's own sign-in page. Anything you print, copy, or share goes where you send it. The emergency QR code is public by choice: anyone who scans it can read what you put on it.

Not medical advice

MedMemory records and shares. It never gives medical advice.

Questions

Use the contact form on the home page and choose the Privacy topic.

Last updated September 30, 2026.