Questions about Mediara Vault

No. There is no registration of any kind, and no Mediara account exists. A Google sign-in is used for one thing only — backing up to your own Google Drive — and you can skip it (“Set up later — use offline”) and still protect your data with encrypted .mediara backup files.

Yes, indefinitely — that is the core design. Records, reminders, search, vitals, Care Modes, insights, the Emergency Card, PDF summaries and encrypted file backups all work with no internet at all. Only three things touch the network, and all three are optional: Google sign-in, Google Drive backup and restore, and downloading a speech pack if your phone needs one for dictation.

Onboarding walks you through four stages: a welcome, the legal consent step, an optional Google connection for backups, and an optional biometric unlock. Then you land on the Today screen and create your profile — only a display name is required, though a date of birth, sex, blood group and height/weight improve the Emergency Card and the doctor PDF.

Consent comes second, before the app offers to connect a Google account, so you agree to how your data is handled before any account is involved. Every legal document is readable in full, offline, before you accept.

Android 8.0 and later. Health Connect features work best on Android 14 and above, where Health Connect is built into the system. There is no iOS version, and none is available today.

English only in this release — a deliberate choice rather than an oversight. Units (metric or imperial), regional emergency numbers and date formats are configurable regardless of language.

Yes. Each person gets their own profile with their own records, reminders and Emergency Card, and reminders fire for every profile, not just the one you are looking at. Add and switch profiles from the avatar on the Today screen or Settings → Profiles.

The free plan includes one profile, so adding a second asks for Mediara Plus. The gate is on creating a profile and only that: profiles you already have — from a restore, or because Plus ended — all stay fully usable.

For looking after someone else’s records on your own phone, caregiver mode gives a read-only view that hides every write control.

On your phone, encrypted: an encrypted SQLite database plus an encrypted file vault inside the app’s private sandbox, with the key held in your device’s hardware-backed keystore. There is no cloud database and no developer server. The only copies that ever exist elsewhere are the encrypted backups you create and the PDFs you choose to share. More detail.

No, and there is no technical route by which we could. We operate no server that receives your records, so we cannot read them, search them, correct them, recover them, or disclose them to anyone — including in response to legal process served on us. The trade-off is that we also cannot help you recover data if you lose your phone without a backup.

Yes, always, with no off switch. The database is encrypted as a whole file, every document and photo is encrypted with AES-256-GCM in the app’s private file vault, and the key never leaves your device’s secure hardware-backed keystore. Backups are separately encrypted before they leave the phone.

Three parties, and you can narrow all three: anyone holding your unlocked phone (close that with the app’s biometric lock and a short lock timeout), anyone you hand a PDF to, and — for account-protected backups only — someone with full control of your Google account. A recovery-code backup is end-to-end encrypted and is not exposed that way.

Never on its own. The complete list of what can leave the phone: encrypted backups when you back up; PDFs and files when you share them; a crash report only if you turned that setting on and then chose to send it yourself; and the Google sign-in exchange if you connect Google. Nothing else — no analytics, no telemetry, no crash-reporting service, and no developer server for any of it to go to. See the table.

Notifications and exact alarms for reminders; camera when you capture a document, wound photo or profile picture; microphone only while you dictate; Health Connect (read only) if you connect a wearable; biometric if you enable app unlock; and internet for Google sign-in and Drive backup.

No location, no contacts, no SMS, no advertising ID, and no broad storage access — gallery selection goes through Android’s own photo picker, which hands back only the file you chose.

No. Every speech session is opened with on-device recognition required, which the platform defines as failing rather than quietly falling back to a network recognizer. If your phone cannot recognise speech locally, dictation is disabled with an explanation and nothing is captured. Installing your language’s offline speech pack in Android’s settings enables it.

A local, opt-in, default-off record. While it is off, nothing is recorded at all.

Turn it on and a crash saves a short technical note on the phone: the time, the app and Android versions, the error type and message, and up to 20 stack frames. There is no field in it for a record, name, note or file, so nothing of yours can end up there. The app never sends it — there is no crash service and no endpoint. You can read a saved report, send it yourself with the share sheet if you are reporting a bug, or delete it; turning the setting off deletes anything saved. At most five are kept, and What a crash report contains shows the exact field list before you decide.

No. There is no AI summarisation, no chat or question answering, and no health data is sent to any AI service. The only machine learning in the app is Google ML Kit text recognition, which runs entirely on your device to read the text in photographed documents.

The app ships no advertising component and no analytics SDK, no crash-reporting service, no advertising identifier and no third-party tracker — verified against the shipping build rather than only the source. Independently of that, the Privacy Policy commits that your health records are never used to select or target anything, no advertising identifier is collected, and nothing is sold or shared with an advertising network. Any change of that kind would be a material change requiring your fresh consent before it took effect.

Yes, entirely, and without asking anyone. Delete individual records into the Recycle Bin and empty it, delete a whole profile, or uninstall the app to destroy the local store. Drive backups are deleted either one at a time from inside the app, or all at once from Google Drive. There is no account to close and nothing held on our side to delete. Step-by-step instructions.

The app deliberately makes no such claim. HIPAA governs healthcare providers and their processors; Mediara Vault is a personal tool under your control that stores data only on your device and in your Drive. Its protections are strong — encryption at rest, an end-to-end encrypted backup option, no third-party access — but “HIPAA compliant” would be the wrong and misleading label.

That is intentional. Hide app contents (Settings → Privacy, on by default) blocks screen capture of your medical data and blanks the app in the recent-apps switcher. Turn it off temporarily if you genuinely need a screenshot, then turn it back on.

The app packages your data into an archive on your phone, encrypts it there with AES-256-GCM, and then either uploads it to a private app folder in your own Google Drive, or writes it as a .mediara file wherever you choose. Only ciphertext ever leaves the device. Automatic backups run manually, daily or weekly when you open the app, plus an extra safety backup after a big editing session, and the newest 3, 5 or 10 archives are kept. Full guide.

Install Mediara Vault, start onboarding, and choose Continue with Google. The app looks in your Drive app folder, lists the backups it finds, and offers Restore from backup — asking for your recovery code if that backup is code-protected. If you kept a .mediara file instead, use Backup & Restore → Restore from a backup file. Restores are atomic: a failure rolls back completely rather than leaving your data half-replaced.

Yes, for backups only, and only in your own Drive. The app uses the hidden per-app data folder, so backups do not appear among your normal Drive files and the app cannot see the rest of your Drive. Backups count against your own Google storage quota, and you can revoke the app’s Drive access at any time from your Google account settings.

It is optional and used for exactly one purpose: authorising access to your own Google Drive so backups can be stored there. It is standard Google account authentication; Mediara receives no health data through it, and the app requests only the app-data-folder scope — not your wider Drive, your email or your contacts.

It is the key to an end-to-end encrypted backup. With one set, your backup can be opened only with that code — not by Google, not by someone who compromises your Google account, and not by us. Without one, backups use account protection instead, which restores on any phone where you sign in with the same Google account.

You need one if you want protection against Google-account compromise, or if you plan to rely on a saved .mediara file as your off-device copy. A .mediara file written without a recovery code is locked to the phone that made it and cannot be opened by anything if that phone is lost. More on the recovery code.

No — by design. Nobody can open a code-protected backup without the code; that is what the end-to-end encryption guarantee means. While you still have your phone with the data on it, set a new code in Settings → Security → Recovery code and make a fresh backup. Older backups still need the old code. Account-protected backups are unaffected by a lost code.

With a Drive backup and account protection: sign in with the same Google account on the new phone and restore. With a code-protected backup: the same, plus your recovery code. With only a .mediara file kept somewhere safe: install the app and restore from the file — provided a recovery code was set when it was written.

With no backup at all, the data is gone. It existed only on that phone, encrypted. That is the flip side of true privacy, and it is why the app nudges you to set up a backup on day one.

Android destroys the app’s sandbox and the local data goes with it, permanently. Backups in your Google Drive or saved as .mediara files are unaffected and can be restored on a new install. Take a backup before you uninstall, reset or sell a phone. And never use “Clear data” to fix a problem — the app’s data is your medical record.

Two ways, for two different purposes. For a clinician: More → Share with Doctor → Generate & Share PDF, a curated human-readable summary with a checkbox for every section. For the complete, machine-restorable copy: Backup & Restore → Save encrypted backup file, which writes a .mediara file you can store anywhere and restore on any phone running the app.

There is deliberately no plaintext CSV or JSON export — an unencrypted complete medical dump sitting on disk would undermine the rest of the design.

Work through these in order:

1. App setting: Settings → Reminders → Medication reminders, on?
2. System permission: Android Settings → Apps → Mediara Vault → Notifications, allowed? Android 13+ asks once and stays off if declined.
3. Exact alarms: Android Settings → Apps → Mediara Vault → Alarms & reminders, allowed?
4. Quiet hours: when on, reminders inside the window are deferred to its end. Check the switch and the window in Settings → Reminders.
5. Battery optimisation: aggressive “deep sleep” handling on some phones delays alarms. Set Mediara Vault to unrestricted.
6. App untouched for a long time: the schedule extends seven days at a time. If the app was neither opened nor interacted with for well over a week, open it once.

The app also watches for the two failures it can detect: if notifications are off or exact alarms are denied, the Today screen shows a persistent banner whose button deep-links straight to the right system screen.

Medication doses live in the medication’s frequency — edit the medicine and changes reschedule immediately. Appointment and vaccination times are on the visit or vaccination form, with the lead time (on time, 1 hour or 1 day before) in Settings → Reminders. Measurement reminders are under Track → Vitals → Measurement Reminders. Care-Mode reminders are on each mode’s own settings.

Yes — Settings → Privacy → Discreet notifications. Reminders then read “Time for a scheduled dose” and lock-screen previews stay private.

Yes. Mark as taken on the reminder notification records the dose in the background, and Snooze 30 min re-fires later even if the app is closed. Both are safe to tap twice — the same dose can’t be double-counted.

Go to Track → Vitals and tap Grant permissions, or use Connected devices → your brand for a guided setup. Approve the read permissions in Health Connect — including “allow access to past data” if you want up to three years of history imported — then tap Sync now.

You need Health Connect (built into Android 14+, a Play Store app on earlier versions) and at least one app writing into it, such as Samsung Health, Google Health/Fitbit, Garmin Connect or Mi Fitness.

The chain is watch → brand companion app → Health Connect → Mediara Vault, and it usually breaks in the middle. Run Check my connection (Track → Vitals → Connected devices) — it verifies all seven links automatically and tells you which one failed.

The most common cause by far is that the companion app isn’t sharing to Health Connect yet. Samsung Health, for example, only shares after you enable it: Samsung Health → Settings → Health Connect → allow data sharing. Many brands have a similar toggle.

Sync happens when you open the app, when you open the Vitals screen, and on Sync now — it is not continuous in the background, so open the app to pull the latest. If a number looks doubled, note that some source apps write both hourly step records and a whole-day summary; the app detects and de-duplicates these. If a discrepancy persists, use Check my connection, which identifies which app is writing steps.

Fourteen: steps, heart rate, resting heart rate, blood oxygen, sleep, body temperature, respiratory rate, distance, active calories, total calories, blood pressure, weight, glucose and height. The app declares one read permission per measurement plus history, and never requests write access.

Yes. Every feature is in the free app, with one profile — it is not a trial, and nothing is a Plus-only screen. What the free plan limits is how many of each thing you can store, plus two monthly allowances. The full comparison.

One profile · 50 active medications · 150 medical events · 15 prescriptions · 15 doctor visits · 10 vaccinations · 15 active allergies · 50 documents (including every attachment) · 10 active custom symptoms · 3 measurement reminders · 1 Care Mode running at a time and 2 of each kind in total. Plus two monthly allowances: 10 text extractions and 3 doctor PDFs, both resetting on the 1st.

There is no limit on storage in either plan, nor on vitals readings, wearable data, dose logs, backups, restores or reminders.

The optional paid tier. What it does today is remove every free-plan limit: the twelve count caps plus the two monthly allowances. Upcoming premium features are included as they ship, but the in-app Plus screen deliberately advertises only what works now — a purchase screen is the worst place to describe something that does not exist yet.

Settings → Mediara Plus, or the main menu → Mediara Plus. Choose monthly, annual, or a one-time Lifetime purchase. Everything goes through Google Play, and prices are shown in your own currency, set per country rather than converted.

Sign in to Google Play with the same Google account you bought it with, then open Settings → Mediara Plus → Restore purchases. Purchases belong to your Google account, not the phone. Your data comes back separately, from your own backup.

Nothing happens to it. Every profile and record you created stays fully usable — read, edit, add, delete, export and back up exactly as before — and reminders keep firing for all profiles. Backups keep running and keep including everything, and restoring is never blocked.

If you are above a free limit when Plus ends, say 300 medical events against a free 150, all 300 stay exactly as they are. The only change is that creating another new item of that kind asks for Plus again, until you delete enough to drop below. Cancelling, a failed payment, a refund and an expiry all behave the same way, and being offline never downgrades you.

No. Some payment methods, such as UPI and cash cards, are confirmed by Google Play with a delay. The app shows a “payment processing” notice and unlocks Plus automatically the moment Play confirms. Don’t buy again; if the payment ultimately fails, Play doesn’t charge you.

Update to the latest version, then reboot the phone to clear stuck platform services. If it persists, reproduce it and use main menu → Troubleshooting → Export app log, then send the log to support@mediara.care with the steps. The log contains technical events, not your health data.

Do not use “Clear data” — that erases your records. If reinstalling is ever advised, back up first and install over the existing app.

Photos have their text read automatically when the document is saved. PDFs are read on demand — open the PDF and tap Make searchable. A PDF that already contains real text is read straight from the file, which is exact and instant.

Check the document’s status chip: pending means give it a moment; failed is usually image quality — retake with more light, the page flat, and filling the frame. If some pages of a PDF could not be read, tap Update text again; it retries only the pages still missing. Handwriting recognition is limited, and printed text works far better.

Because its text hasn’t been extracted yet — a photo or scan has no text until it is read, so it is findable by its title but not by what is written inside it. The Search screen tells you rather than quietly returning nothing: it counts them and offers Extract now. If this month’s free allowance is used up, the same banner names the date it resets.

Make sure the phone has Google Play services and a connection, then use Backup & Restore → Connect Google and complete the account picker. If it fails instantly, remove and re-add the Google account in Android settings. Corporate or child-managed accounts can block third-party Drive scopes entirely — try a personal account.

Confirm your fingerprints or face are enrolled in Android settings and work on the phone’s own lock screen. The app falls back to your device PIN or pattern when biometrics fail, so you can never be locked out — it has no password of its own. Enrolling a new fingerprint can require one device-credential unlock first.

For backups: make sure it is the file itself rather than a cloud placeholder — download it fully first. Legacy .medvault files are accepted. For documents: files over 50 MB are rejected by design, so compress or split. If the share sheet shows no targets, install or enable at least one app that accepts PDFs.

The main menu → Troubleshooting screen has repair tools that fix rather than reset: Resync reminders rebuilds every alarm from scratch, Rebuild search index repairs the index, and there are Health Connect re-sync and re-import actions. None of them touches your records.