MedCounter is a pharmacy management app built for small Indian pharmacies. This policy explains what information we collect, why, and how we handle it — across both the medcounter.in website and the MedCounter mobile app (available on Google Play). MedCounter is operated from India by the MedCounter team.
1. The website waitlist form
If you submit the waitlist form on medcounter.in, we store:
- Your name and phone number (required, so we can reach you).
- Your city and shop name (optional, helps us plan pilot regions).
- Anything you type in the message field (optional).
- A non-reversible hash of your IP address, used purely to rate-limit abuse. We do not store the raw IP.
- Your browser's user-agent string, used to debug submission issues.
We use this only to contact you about the MedCounter pilot and to understand demand by region — never sold, rented, or shared outside the MedCounter team.
2. The mobile app
The app is a tool pharmacy owners use to run their shop. The data below is collected to provide that service to you, the account holder.
Account & sign-in
- We use Google Sign-In to authenticate you. From your Google account we receive your name, email address, and profile picture. We do not receive your Google password and cannot access anything else in your Google account.
- When you set up your pharmacy, you provide business details: shop name, phone, and optionally drug licence number, GSTIN, and address. These appear on the bills you generate.
Data you enter to run your shop
As you use MedCounter, you create business records that we store on your behalf so they sync across your devices:
- Inventory and stock — medicines, batches, quantities, prices.
- Bills and sales — line items, totals, payment mode, returns.
- Customer details you choose to add — typically a name and phone number, so you can send a bill on WhatsApp or look up a customer's history. You control what you enter; please only add customer information you are permitted to keep.
- Suppliers and purchase orders.
This is your business data. We do not sell it or use it for advertising.
Camera
With your permission, the app uses your device camera to scan medicine barcodes so you can add items quickly. We read the barcode value only — we do not store photos or video, and the camera is never used in the background.
Diagnostics & analytics
- Crash & error reporting (Sentry): when the app errors or crashes, we collect a diagnostic report — device model, OS version, app version, and a technical stack trace — to fix bugs.
- Product analytics (PostHog, hosted in the EU): we record which screens and features are used, and basic device info, to understand how the app is used and improve it. This is tied to your account so we can support you, but is never sold or used for cross-app advertising.
Payments
MedCounter is a paid subscription (with a free introductory period). When paid plans go live, payments are processed by Razorpay, a licensed Indian payment provider. Razorpay handles your card / UPI / bank details directly under their own privacy policy — we never see or store your full payment credentials. We store only your plan, subscription status, and a Razorpay reference ID.
3. Where your data lives & who processes it
We host your data with trusted infrastructure providers who act as our processors:
- Supabase — our database, authentication, and file storage (e.g. bill PDFs).
- Sentry — crash and error diagnostics.
- PostHog (EU region) — product analytics.
- Razorpay — payment processing (when paid plans are active).
- Cloudflare — hosts the website and may see anonymous request metadata.
Each tenant's data is isolated so one pharmacy can never see another's. We do not sell, rent, or trade your data, and we do not share it with advertisers or data brokers.
4. How long we keep it
We keep your account and business data for as long as your account is active. If you ask us to delete your account, we remove your pharmacy's data within 30 days, except where we must retain certain records (e.g. transaction/invoice records) to meet Indian legal and tax obligations.
5. Your rights
You can ask us at any time to:
- Show you the data we hold about you or your pharmacy.
- Correct or update it.
- Delete your account and associated data.
- Stop contacting you for marketing.
Email hello@medcounter.in and we'll act on it within 30 days. To request account deletion, write to the same address with the email you signed up with.
6. Delete your account
You can ask us to delete your MedCounter account (Google Play package in.medcounter.app) and your pharmacy's data at any time. Here's how to request it, and exactly what is deleted or kept.
To request deletion: email hello@medcounter.in from the Google email address you signed in with, subject “Delete my account”. We complete deletion within 30 days.
The full process:
- Email hello@medcounter.in from the Google email address you signed in with (so we can verify it's you), with the subject "Delete my account".
- Optionally include your shop name so we can locate your account quickly.
- You can also reach us in-app via More → Email support.
We confirm every request and complete deletion within 30 days.
What gets deleted: your account and sign-in identity (name, email from Google Sign-In), shop/pharmacy profile and settings, inventory and stock batches, customers, bills and sales history, and the analytics/diagnostics identifiers linked to your account.
What we keep, and for how long: where Indian law requires it — for example GST invoice and transaction records — we retain those specific records for the legally mandated period (currently up to 8 years for tax records), after which they are deleted. Backups containing your data are purged within 30 days of deletion. We never sell your data.
7. Children
MedCounter is a business tool intended for pharmacy owners and staff. It is not directed at, and we do not knowingly collect data from, anyone under 18.
8. Website cookies & analytics
The medcounter.in website uses Cloudflare Web Analytics, which counts visits without setting cookies or fingerprinting your browser. There is no third-party advertising, no Google Analytics, and no Facebook pixel on the website.
9. Changes to this policy
We'll update the "Last updated" date above whenever this page changes meaningfully, and notify active users in-app or by email for material changes.
10. Contact
MedCounter · hello@medcounter.in