← Medivault

Terms of Service

Effective date: 1 April 2026

These Terms of Service (“Terms”) govern your use of Medivault, a personal health record service operated by Novus Digital Initiative (“we”, “us”, “our”). By creating an account you agree to these Terms. If you do not agree, do not use the service.

1. The service

Medivault is a personal health record organiser. It allows you to store, view, and share your own medical documents, prescriptions, lab results, medications, and vitals. Medivault is not a medical provider, clinic, hospital, or insurer. Nothing in the service constitutes medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for medical decisions.

2. Eligibility

  • You must be at least 18 years old to create an account.
  • You must provide accurate information at signup.
  • You are responsible for all activity that occurs under your account.

3. Your vault passphrase

Medivault uses zero-knowledge encryption. Your vault passphrase is used to derive the encryption key that protects your health data. We do not store your passphrase and cannot recover it. If you lose your passphrase, your encrypted data cannot be recovered. You are solely responsible for keeping your passphrase safe.

4. AI features

AI-powered document analysis and health Q&A are optional features. When enabled:

  • Plaintext content of your documents is transmitted to our AI provider for processing.
  • AI outputs are informational only — they are not medical advice.
  • AI extraction results may contain errors. Always review extracted data before relying on it.
  • You can disable AI features at any time in Settings.

5. Sharing

You may create share links to grant temporary, limited access to your records. Share links use zero-knowledge encryption — the decryption key is embedded in the URL and never transmitted to our servers. You are responsible for deciding what to share, with whom, and for how long. Revoke shares promptly when no longer needed.

6. Acceptable use

You agree not to:

  • Upload documents belonging to another person without their explicit consent.
  • Use the service for any commercial medical or clinical purpose.
  • Attempt to reverse-engineer, bypass, or circumvent any security control.
  • Use automated scripts or bots to interact with the service at scale.
  • Impersonate any person or misrepresent your identity.

7. No medical advice

Important: Medivault and its AI features provide informational assistance only. No content generated by Medivault — whether from document extraction, lab interpretation, medication information, or AI chat — constitutes medical advice, clinical diagnosis, or treatment recommendations.

Do not make any medical decision — including starting, stopping, or changing medications — based solely on information from Medivault. Always consult a qualified, licensed healthcare professional.

8. Your content

You retain full ownership of all health data, documents, and records you upload to Medivault. We claim no intellectual property rights over your content. By using the service, you grant us a limited, non-exclusive licence to process your data solely for the purpose of delivering the service to you.

9. Service availability and beta status

Medivault is currently in beta. We do not guarantee uninterrupted availability. The service may change, be suspended, or be discontinued with reasonable notice. We recommend maintaining independent copies of your important medical documents.

10. Limitation of liability

To the maximum extent permitted by applicable law, Novus Digital Initiative and its affiliates, directors, and employees shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of Medivault, including loss of data, loss of health information, or reliance on AI-generated content.

Our total cumulative liability to you shall not exceed the amount you have paid us in the 12 months preceding the claim, or USD 10, whichever is greater.

11. Termination

You may delete your account at any time from Settings. We may suspend or terminate accounts that violate these Terms. On termination, your encrypted data will be permanently deleted in accordance with our Privacy Policy.

12. Changes to these Terms

We may update these Terms from time to time. We will provide at least 30 days’ notice of material changes by email or in-app notification. Continued use after the effective date constitutes acceptance.

13. Governing law

These Terms are governed by the laws of Singapore. Any dispute arising from or relating to these Terms shall be subject to the non-exclusive jurisdiction of the courts of Singapore. We encourage you to contact us at hello@novusdigi.com to resolve any issue before initiating legal proceedings.

14. Sub-processors

We engage the following third-party sub-processors to deliver the service. By using Medivault, you acknowledge that your data may be processed by these parties in accordance with their respective terms and privacy policies.

ProcessorPurposeLocationData retention
Supabase, Inc.Database, authentication, file storageSingapore (ap-southeast-1)For duration of account
OpenAI, L.L.C.AI document analysis and health Q&A — only when AI features are enabledUnited StatesZero retention — not stored after each API call

You can disable AI features at any time in Settings to prevent data being sent to OpenAI. Database and storage processing is required for core service functionality.

15. Contact

Questions about these Terms:
hello@novusdigi.com
Novus Digital Initiative