Terms and Conditions

myMed Digital Health Wallet

Welcome to myMed. Please read these Terms and Conditions (“Terms”) carefully before creating an account or using the myMed digital health wallet application (the “App” or “Services”). By creating an account, clicking “I Agree,” or otherwise using the Services, you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy.

1. Who We Are

The myMed App and Services are provided by Motive Labs Inc. (“myMed,” “we,” “us,” or “our”), a company incorporated under the laws of Barbados with company registration number 54452, having its registered office at 14 Philip Drive, Pine Gardens, St. Michael, Barbados.

For any questions, complaints, or exercise of your data protection rights, you may contact us at:

General inquiries: contact@motivelabs.net
Data Protection Officer

2. Important Medical Disclaimer (Not Medical Advice)

Informational Purpose Only. myMed is a digital administrative and organizational tool. All content, metrics, charts, and data insights provided within the App are for general wellness and record-keeping purposes only and do not constitute medical advice, diagnosis, or treatment.
No Doctor-Patient Relationship. Use of the App does not create a physician-patient relationship between you and myMed, and myMed is not a healthcare provider.
Not an Emergency Service. myMed is not monitored in real time and is not an emergency response system. Do not rely on the App during a medical emergency — contact your local emergency services immediately.
Consult Your Doctor. Do not start, stop, or change any medical treatment, medication, diet, or exercise regimen based solely on information displayed in the App without first consulting a licensed healthcare professional.
Data Accuracy Limitations. Metrics imported from wearables, phones, or third-party health platforms may be incomplete, delayed, or inaccurate. myMed does not verify or validate the clinical accuracy of imported or manually entered data.
No Continuous Monitoring. myMed does not continuously monitor incoming data in real time and does not employ clinical staff to review your data as it arrives. Any alert, flag, or notification the App may generate is based on limited automated rules applied to the data available to it at that moment.
Absence of an Alert Is Not a Clean Bill of Health. Where the App generates alerts or notifications based on imported metrics, these are automated, limited by the data made available to us, and are not a clinical screening. The absence of an alert does not indicate the absence of disease or any other health condition, and must never be used as a substitute for medical evaluation, diagnostic testing, or professional clinical judgment.

3. Services and Data Integrations

3.1 Data Sources

The App aggregates health records, medical test results, and wellness metrics, and imports data from third-party ecosystems, including Apple Health, Google Health Connect, wearable devices, smartphones, and other current or future connected hardware you choose to link.

3.2 Third-Party Platforms and Wearable Devices

No Control Over Third-Party Data. We do not control, and are not responsible for, the accuracy, completeness, availability, or data collection practices of Apple Health, Google Health Connect, device manufacturers, or any other third-party source. Your use of those platforms and devices is governed by their own terms and privacy policies.
Device Performance Not Guaranteed. myMed makes no representation or warranty regarding the accuracy, calibration, or medical-grade reliability of any wearable or connected device. Sensor errors, sync failures, firmware issues, or connectivity interruptions are outside myMed’s control.
Assumption of Risk. You acknowledge that consumer wearables and health apps are not certified medical devices unless expressly stated by their manufacturer, and you assume the risk of relying on data derived from them for any purpose within the App.
Full-Dataset Import. When you connect Apple Health or Google Health Connect, myMed imports the complete set of data categories you have authorized through that platform’s own permission screen. myMed does not offer separate in-app toggles to import only some of that authorized data — granular control over what is shared is exercised through the Apple Health or Google Health Connect permission settings on your device, not within the App. We import the full authorized dataset because myMed’s core purpose is to give you, and any physician you choose to share with, a coherent longitudinal picture of your health; partial or fragmented imports would create gaps that could be clinically misleading. We retain this data only for as long as it remains necessary for that purpose, and you may disconnect the integration or delete your account at any time (see Section 6).
Revocable Integration. You may disconnect Apple Health, Google Health Connect, or any other integration at any time through the App or your device’s own health-platform settings. Disconnection stops future imports but does not automatically delete data already imported into myMed; see Section 6 for deletion rights.

3.3 Voluntary Sharing With Your Physician

Patient-Initiated Sharing Only. The App allows you to voluntarily share your health data with a physician or other healthcare provider of your choosing. This sharing is initiated solely by you and occurs only with your explicit, specific action (e.g., generating a share link or granting provider access).
myMed’s Role Is Limited to the Platform. myMed acts solely as a technical conduit for transmitting data you choose to share. myMed is not responsible for, and has no control over, how a receiving physician interprets, stores, relies upon, or acts on the shared data.
Revoking Access. You may revoke a physician’s access to your wallet at any time through the App. This is your wallet, and the decision to grant or revoke access rests with you; myMed does not notify the physician when you revoke their access. Physicians are expected to record any clinically relevant information in their own records during the period they had access, rather than relying on continued access to your wallet.
Physician’s Independent Judgment. Any physician receiving data through myMed is responsible for exercising independent professional judgment, including verifying data through direct clinical assessment where appropriate, before making any diagnostic or treatment decision. myMed data is supplementary information only and is not a substitute for clinical examination.
No Liability for Provider Reliance. To the maximum extent permitted by law, myMed disclaims all liability for any decision, act, or omission by a physician or healthcare provider made in reliance on data shared through the App.
Transmission Does Not Create a Duty to Act. Sharing your data with a physician through the App is intended to support your care during scheduled visits, teleconsultations, or other clinical encounters with that physician — it is not a continuous-monitoring feed. Successful transmission of your data to a physician or other recipient through the App does not create, on the part of myMed or that recipient, any duty to review, respond to, or act upon that data within any particular timeframe, or at all, outside of such encounters. If you need a healthcare provider to review information promptly, you are responsible for contacting them directly and confirming receipt through your normal channel of communication with that provider.
Full Wallet Is Shared. When you grant a physician access, the entire contents of your health wallet are shared with that physician, rather than selected categories of data only. The App does not currently support limiting an individual physician to only part of your wallet; if you do not want a particular physician to see certain information, you should not grant that physician access. We share the full wallet, rather than only selected categories, because a partial clinical picture can be misleading or unsafe for a physician to rely on — for example, medication or lab data reviewed without related activity or symptom history can lead to an incomplete assessment. This approach is proportionate to that clinical purpose, and remains within your control: you choose whether to grant a given physician access at all, and can revoke that access at any time (see Revoking Access, below).
A Physician’s Staff May Add Clinic Measurements Only. A physician you have granted access to may authorize members of their clinical or administrative staff to enter metrics measured during your in-clinic visits on the physician’s behalf. Staff accounts of this kind cannot view the contents of your wallet; the ability to view your shared data remains with the physician you have authorized.
A Practice’s Clinic Admin Assigns Roles. Within a practice, the physician-in-charge acts as the Clinic Admin, responsible for enrolling and assigning roles to other physicians and Staff/Nurse accounts within that practice, and for managing the practice’s subscription seats. The Clinic Admin role itself does not grant any additional access to your wallet beyond what a Physician account already has under this Section; a Clinic Admin’s ability to view your shared data depends on being the specific physician you have authorized, not on holding the Clinic Admin designation.
Future Clinic Record Integration. With the future release of the myMed EMR, a physician may be able to incorporate data you have shared into their own clinic record-keeping system, maintained separately from your wallet. This remains subject to your consent to share as described in this Section, and does not change your ownership of the underlying data in your wallet (see Section 12).

3.4 Sharing With Verified Emergency Clinics

In addition to sharing your wallet with a physician of your choosing, myMed offers an option to share your complete wallet with verified emergency clinics, so that emergency responders may access your health information in an emergency.

Consent Basis for This Feature. This feature is off by default. Emergency-clinic sharing is activated only if you choose to turn it on, through an affirmative, specific action in the App’s privacy settings — it is never enabled automatically on your behalf.
Full Wallet Shared. As with sharing with a physician under Section 3.3, this feature shares the complete contents of your wallet rather than selected categories.
Verification of Recipient Clinics. myMed limits this feature to emergency clinics that have gone through our verification process before they are able to receive wallet data through this feature.
Right to Turn Off. You may disable emergency-clinic sharing at any time in the App’s privacy settings. Disabling this feature stops future access by emergency clinics but does not affect access already exercised before you disabled it.

4. Eligibility and Account Security

Age Requirement. myMed is intended solely for use by adults. You must be at least 18 years of age, or the legal age of majority in your jurisdiction if higher, to create an account or use the App. myMed does not offer parent- or guardian-managed accounts for minors, and accounts must not be created on behalf of, or used by, anyone under this age.
Account Credentials. You are solely responsible for maintaining the confidentiality of your login credentials, passwords, and biometric access features (e.g., Face ID, fingerprint), and for all activity occurring under your account.
Data Accuracy. You agree to provide true, accurate, and current information. myMed is not liable for errors resulting from inaccurate, outdated, or falsified data that you manually upload or authorize for import.

5. Data Protection and Privacy

5.1 Governing Framework

myMed processes personal data, including sensitive personal data relating to your health, in accordance with the Barbados Data Protection Act, 2019-29 (the “DPA”) and, where applicable to you, other data protection laws (such as the EU/UK GDPR) that may apply because of your location or the location of your data.

In addition to the DPA, myMed’s technical infrastructure is designed to align with HL7 and FHIR health-data interoperability standards, and with data-handling practices consistent with the U.S. Health Insurance Portability and Accountability Act (“HIPAA”) framework, where applicable to your data.

5.2 What We Collect and Why

Full details of the categories of personal data collected, the purposes and legal bases for processing, retention periods, and your rights are set out in our [Privacy Policy Link]. By agreeing to these Terms, you acknowledge that you have had the opportunity to review the Privacy Policy.

5.3 Your Rights as a Data Subject

Subject to the DPA, you have the right to:

Request access to, and a copy of, the personal data we hold about you;
Request correction of inaccurate or incomplete data;
Request erasure of your data, subject to legal and record-keeping exceptions;
Withdraw consent to processing at any time, without affecting the lawfulness of processing carried out before withdrawal;
Object to, or request restriction of, certain processing; and
Lodge a complaint with the Barbados Data Protection Commissioner or another applicable supervisory authority.

To exercise these rights, contact us using the details in Section 1. We will respond within the timeframe required by applicable law.

5.4 Our Security Commitment

Our Commitment. We employ technical, physical, and administrative security measures designed to protect your sensitive medical data against unauthorized access, loss, alteration, or disclosure, including encryption in transit and at rest, access controls, and regular security reviews.
No Absolute Guarantee. No digital storage or internet transmission method is 100% secure. While we implement industry-standard safeguards, you acknowledge and accept the inherent risks of transmitting health data electronically.

6. Explicit Consent to Process Health Data

Because your medical records, test results, and wearable-derived metrics constitute sensitive personal data under the DPA, we rely on your explicit, informed consent — not merely your general agreement to these Terms — to process this category of data. Accordingly:

Separate, Specific Consent. Before importing data from Apple Health, Google Health Connect, a wearable, or any similar source, or before storing medical test results, the App will present a clear, specific consent prompt describing what data will be collected, why, and how it will be used.
Consent Covers the Full Authorized Dataset. As explained in Section 3.2, myMed imports the complete set of data categories you authorize through Apple Health’s or Google Health Connect’s own permission screen; your consent here covers that full dataset rather than individual categories. To exclude a specific category, adjust the permission at the platform level before connecting, or do not connect that integration.
Right to Withdraw. You may withdraw consent at any time via the App’s privacy settings or by contacting us. Withdrawal stops future processing of that category of data but does not affect processing already carried out, and may disable related features.
Sharing Consent Is Separate. Your consent to store data in your wallet is separate from, and does not imply, consent to share that data with a physician or third party. Sharing requires a distinct, affirmative action by you as described in Section 3.3.

6.1 Consent to Use of De-Identified Data for Research, Public Health, AI Development, and Analytics

Separately from the consent described above, we ask for your permission to use disaggregated and de-identified data derived from your health records and metrics for: (a) public health research and policy insights; (b) developing, training, testing, and improving artificial intelligence and machine learning models, whether used within or outside the App; and (c) commercial analytics, such as understanding wellness trends across our user base.

Explicit, Freestanding Consent. This use requires its own explicit, opt-in consent, presented separately from your acceptance of these Terms and from your consent to connect a device integration. Declining does not affect your ability to use the core wallet features.
De-Identification, Honestly Described. Before use for these purposes, we remove direct identifiers such as your name, contact details, and exact date of birth, and we apply additional safeguards intended to reduce re-identification risk, such as aggregation, minimum cohort sizes, and restrictions on recipients attempting to re-identify individuals within a dataset. We maintain internal documentation of the de-identification measures applied to a given dataset or model. No de-identification technique can guarantee data can never be re-identified, particularly for unusual or small data patterns, and we do not claim otherwise; a residual risk of re-identification remains, which is why this use requires its own explicit consent rather than being bundled into general data storage. We will not attempt to re-identify this data ourselves.
Commercial Analytics Is Distinct From Research. Use of your de-identified data for commercial analytics is a separate category from public health research and AI development and will be described distinctly at the point consent is requested.
Right to Withdraw. You may withdraw this consent at any time through the App’s privacy settings. Withdrawal stops the inclusion of your data in future datasets, models, or analyses, but does not affect data already incorporated into a dataset, a trained model, or a completed analysis prior to withdrawal.

7. Cross-Border Data Transfers

Where Your Data May Be Processed. myMed and its hosting, cloud storage, and service providers may process and store your data on servers located outside Barbados, including in jurisdictions such as the United States or European Union.
Safeguards. Where personal data is transferred outside Barbados, we take steps intended to ensure it receives a comparable level of protection, which may include contractual data protection clauses with our service providers, selecting providers in jurisdictions recognized as offering adequate protection, and technical safeguards such as encryption.
Third-Party Sub-Processors. We maintain a list of key sub-processors (e.g., cloud hosting, analytics, customer support tooling) and will make this available on request or via our Privacy Policy.
Your Acknowledgment. By using the Services, you acknowledge that your data may be processed outside Barbados as described above and in our Privacy Policy.

8. Data Breach Notification

Our Obligation. If we become aware of a security incident that results in the unauthorized access, disclosure, alteration, or loss of your personal data (a “Breach”), we will assess the risk to your rights and freedoms and, where required by the DPA, notify the Barbados Data Protection Commissioner within the statutory timeframe.
Notice to You. Where a Breach is likely to result in a high risk to your rights, we will notify you without undue delay, describing the nature of the Breach, the data affected, and the steps we are taking, and any steps you can take to protect yourself.
Cooperation. We will cooperate with the Data Protection Commissioner and any relevant regulator in connection with the investigation and remediation of any Breach.
Reporting Suspected Incidents. If you suspect unauthorized access to your account or data, contact us immediately using the details in Section 1.

9. Wearable and Third-Party Device Disclaimer

Not Medical Devices. Unless a specific device is expressly marketed by its manufacturer as a regulated medical device, all wearables, phones, and connected hardware supported by myMed are consumer wellness products and have not been evaluated by myMed for clinical or diagnostic accuracy.
Wearables May Miss or Misreport Events. Wearable devices and their sensors can fail to detect genuine abnormal events (false negatives), can generate false alerts for events that did not occur (false positives), and can report inaccurate or artifact-affected readings due to factors such as motion, poor skin contact, low battery, or firmware bugs.
Not a Sole Basis for Medical Decisions. You should not rely on wearable-derived data as the sole basis for either seeking or avoiding medical care. A reassuring reading does not rule out a health problem, and an alarming reading does not confirm one. If you have symptoms or concerns, seek medical advice regardless of what your wearable or the App shows.
No Manufacturer Endorsement. Integration with a third-party device or platform does not constitute an endorsement of that device’s accuracy, safety, or fitness for any particular purpose.
Exclusion of Liability. To the maximum extent permitted by law, myMed disclaims all liability for any injury, loss, misdiagnosis, delayed diagnosis, or adverse health outcome arising from inaccurate, incomplete, or delayed data originating from a wearable, phone sensor, or other third-party device or platform, including outages or errors on the part of Apple Health, Google Health Connect, or any device manufacturer.
Indemnity Carve-Out. Nothing in this section limits liability that cannot be excluded under applicable law, such as liability for death or personal injury caused by myMed’s own gross negligence or willful misconduct.

10. Healthcare Provider Liability Shield

Platform Only. myMed provides a technology platform for organizing and, where you choose, sharing health information. myMed does not practice medicine, does not employ or supervise any physician, and does not review, verify, or endorse any clinical decision made using data from the App.
Supplementary Data Only. Any physician or healthcare provider who receives patient-generated data through myMed is expected to treat that data as supplementary information only, to be corroborated through independent clinical assessment as the provider deems appropriate, and not as a substitute for direct examination or diagnostic testing.
No Liability for Third-Party Clinical Decisions. myMed is not a party to, and accepts no liability for, the physician-patient relationship, clinical decisions, treatment outcomes, or professional conduct of any healthcare provider who accesses data shared through the App.
Provider Responsibility for Compliance. Any healthcare provider accessing patient data through myMed is responsible for complying with their own professional, ethical, and legal obligations, including applicable medical confidentiality and data protection requirements in their practice.

11. Artificial Intelligence Features

AI-Assisted, Not AI-Diagnosed. The App may use artificial intelligence or machine learning to summarize records, surface trends, flag possible anomalies, or generate other insights (“AI Features”). AI Features are decision-support and organizational tools only, and do not constitute medical advice, diagnosis, or a treatment recommendation.
AI Can Be Wrong. Outputs generated by AI Features may be incomplete, outdated, or factually incorrect, including generating plausible-sounding but inaccurate summaries or flags (sometimes called “hallucinations”). myMed does not guarantee the accuracy, completeness, or clinical validity of any AI-generated output.
Human Judgment Required. Any AI-generated insight, summary, or flag should be independently verified by you or a qualified healthcare professional before being relied upon for any health-related decision. AI Features do not replace clinical examination, professional judgment, or the disclaimers set out in Sections 2, 9, and 10.
No Duty to Update. myMed is not obligated to re-run, correct, or update a prior AI-generated output, even if the underlying model or data used to produce it is later changed or corrected.

12. Intellectual Property

myMed’s IP. The App, including its software, source code, algorithms, user interface, design, trademarks, logos, and all related documentation (collectively, “myMed IP”), is owned by myMed or its licensors and is protected by copyright, trademark, and other intellectual property laws. Nothing in these Terms transfers any ownership of myMed IP to you.
Limited License to You. Subject to your compliance with these Terms, myMed grants you a limited, non-exclusive, non-transferable, revocable license to access and use the App on a personal device for your own personal, non-commercial use.
Restrictions. You may not copy, modify, distribute, sell, lease, reverse engineer, decompile, or create derivative works based on the App or myMed IP, except to the extent such restriction is prohibited by applicable law.
Your Data Remains Yours. As between you and myMed, you retain ownership of the underlying medical records, test results, and other personal health data you upload or import into the App. Storing your data in the App does not transfer ownership of that data to myMed; it only grants myMed the limited rights needed to provide the Services, and, where you have separately consented, the rights described in Section 6.1.
Feedback. If you provide suggestions, ideas, or feedback about the App, you agree that myMed may use that feedback without restriction or obligation to you.

13. Prohibited Uses

You agree not to:

Reverse engineer, decompile, or copy the source code of the myMed App;
Use bots, scripts, or scrapers to extract data from the platform;
Upload corrupted files, malware, viruses, or fraudulent medical documents;
Impersonate any other person or misrepresent your identity to access medical records that do not belong to you; or
Use the Services in any manner that violates applicable law, including the DPA.

14. Limitation of Liability and Warranties

“As-Is” Service. The myMed platform is provided on an “as-is” and “as-available” basis without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.
No Liability for Data Loss. myMed is not liable for data loss caused by device malfunctions, network connectivity errors, or third-party cloud failures beyond our reasonable control.
Cap on Damages. To the maximum extent permitted by law, myMed shall not be liable for any indirect, incidental, special, or consequential damages arising out of your use of, or inability to use, the wallet. Nothing in these Terms limits liability that cannot be limited under applicable law.

15. Modifications and Termination

Right to Update Terms. We may update these Terms from time to time. We will notify you of material changes via an in-app alert or email at least 30 days before they take effect, and where a change relates to processing based on your consent, we will seek your renewed consent before that processing begins. Continued use of the App after the effective date constitutes acceptance of the updated Terms.
Account Termination. We may suspend or terminate your access to the App if you materially breach these Terms. Where practicable, we will provide notice before termination. You may delete your account and export your data at any time via the App settings, subject to any retention required by law.

16. Governing Law and Dispute Resolution

Regulatory Complaints. Nothing in this section prevents you from lodging a complaint with the Barbados Data Protection Commissioner regarding the processing of your personal data.
Governing Law. These Terms shall be governed by and construed in accordance with the laws of Barbados, without regard to its conflict of law provisions.
Jurisdiction. You agree that the courts of Barbados shall have exclusive jurisdiction to resolve any dispute arising out of or relating to these Terms, except where mandatory consumer protection or data protection law gives you the right to bring proceedings in your own jurisdiction.