Zero Data Retention Guarantee
MedHall's core privacy promise, stated plainly and matching the actual implementation.
The Guarantee
MedHall retains no user data on any server. It has no accounts, no user database, no content database, no server-side AI processing, and no analytics. It does not intentionally collect, store, copy, log, or share any user content — prompts, notes, uploaded files, images, audio, chat messages, room activity, answers, or API keys. If you never return to the site, nothing about you exists on any MedHall-operated system.
What MedHall Never Collects
MedHall never collects: names, phone numbers, email addresses, postal addresses, institutional details, dates of birth, identification numbers, payment information, location data, device fingerprints, browsing history, or any content you enter, upload, say, or share.
What MedHall Never Stores
MedHall never stores on any server: your API key, your prompts, your uploaded files or images, your audio recordings, your AI answers, your study-room messages, your room codes or passwords, or your daily usage patterns beyond what the hosting platform logs on its own infrastructure. There is nothing to delete because nothing is retained.
What Lives on Your Own Device
The only data that exists is on YOUR device, in YOUR browser: your API key (localStorage, until Disconnect), your language choice, small first-visit flags, a capped on-device cache of identical AI responses, the Study Room session snapshot, the MedPatient session state, the daily usage counter, and the Page Intelligence document session (IndexedDB, 12-hour TTL). All of these are yours, all are deletable by you, and none are sent to MedHall. The complete inventory is listed in the Privacy Policy.
When and How Data Is Deleted
On your device: the API key is removed the moment you press Disconnect; Study Room sessions are removed when the room ends, you leave, or the focus timer expires; the Page Intelligence session is wiped after 12 hours without opening the tool or on Disconnect; the AI response cache is cleared on Disconnect or expires by its time-to-live; and the daily counter resets at midnight. Clearing your browser storage removes everything at once. Because MedHall retains nothing server-side, no deletion request to MedHall is ever needed for MedHall-held data.
Data That Leaves Your Device
Three flows leave your device, all under the control of third parties, never MedHall: (1) your prompts, files, and audio go directly from your browser to the AI provider you connect with your own key, under that provider's policies; (2) standard technical data is processed by the hosting platform (Vercel) in its server logs; and (3) WebRTC signaling metadata is briefly handled by the PeerJS public cloud to set up study-room connections. MedHall is not a party to any of these flows.
Legal Effect
This guarantee is a factual statement of how the service is designed and operated, and it is part of the Privacy Policy. It does not limit or exclude any liability that cannot legally be limited or excluded, and it does not cover data processed by third parties (AI providers, hosting, signaling, advertising), which is governed by their own policies as described in this policy and the Third-Party Services page.
Questions
If you have any question about this guarantee or believe it has been breached, contact: ahmeddelwaan@gmail.com. Reports are handled confidentially and in good faith.