MedSay Terms of Service
Effective October 11, 2026
What this agreement is
These terms are the agreement between you and AYI LLC, a Utah limited liability company doing business as MedSay, about your use of MedSay, at medsay.app.
Our Privacy Policy is part of this agreement. It describes what we do with your information, and it is where the important promises live. Read it alongside this.
If you do not agree to these terms, do not use the service.
What MedSay is
MedSay builds and holds a medical record that belongs to you. It gathers what is scattered across the places that have treated you, keeps what you tell us in your own words, and helps you get ready for appointments.
The record is yours. We hold it for you. You can take a complete copy at any time and give it to anyone. Closing your account does not take it away from you, and it passes to the people you name when you die. The Privacy Policy sets out exactly how that works.
What MedSay is not
This is not medical care and we are not your doctor. The service is for educational and informational purposes, not clinical decisions.
We do not diagnose. We do not treat. We do not tell you what medication to take, what dose to take, or when to stop. We do not tell you whether to go to the hospital. Those decisions belong to you and to the clinicians who are responsible for your care.
What we do is different: we gather your information, we organize it, we notice when something does not add up, and we show you what we noticed so you can ask about it. A question is not a diagnosis. A gathered fact is not advice.
If you think you are having a medical emergency, call 911 or go to an emergency department. Do not use this service instead. The emergency screen in the app is there to help whoever is with you find your information quickly. It is not a way to summon help and it does not contact anyone on its own.
Never change or stop a medication because of something you read here. Talk to the person who prescribed it.
Your account
You must be eighteen or older to create an account for yourself.
You give us accurate information. The record is only as good as what goes into it, and a wrong date of birth or a wrong phone number can mean you lose access to your own record.
Your sign-in belongs to you alone. If you sign in with a fingerprint or a face, that credential is tied to your device. If you sign in with a code sent by text, that code is for you. Do not share either.
Do not share your account with anyone, including family. If you want someone to see or help with your record, we have a proper way to do that, where they hold their own sign-in and their own name appears in the access log. Sharing your account instead means the record cannot tell who did what, which damages the thing you are keeping.
Tell us if something looks wrong. If you think someone has reached your account without permission, contact us.
Caregivers and people acting for someone else
If you hold access to another person's record, you are doing so with their permission and within the limits they set.
You use that access for their benefit and for nothing else. You do not copy their record for your own purposes, and you do not use what you learn in it against them.
If you hold legal authority for someone, such as a healthcare power of attorney or a guardianship, we may ask you to show it, and we record that it was shown.
The person whose record it is can take your access away at any time, and every change to access is recorded with a date and a reason.
Connecting other sources
You can connect outside sources to your record: Medicare, the VA, a hospital portal, a health plan. When you do, you are authorizing us to receive your information from them on your behalf.
Only connect accounts that are yours. Connecting someone else's account, or using credentials you were not given, is a misuse of this service and of theirs.
Some information arrives with conditions attached. Medicare claims received through Blue Button carry terms set by the Centers for Medicare and Medicaid Services, and VA health records carry terms set by the Department of Veterans Affairs. Those terms travel with that information. The Privacy Policy names them.
You can disconnect at any time. We stop receiving new information immediately. What already arrived stays in your record unless you ask us to delete it.
Deleting everything. You can have your whole record permanently deleted at any time, from Settings or by writing to us. The Privacy Policy says exactly what that covers and how fast it happens.
What we ask of you
Do not use this service to break the law.
Do not try to reach anyone else's record, test our security without permission, or interfere with the service working for other people.
Do not scrape the service, copy it, take it apart, or use it to build a competing product.
Do not upload anything malicious, and do not upload someone else's health information unless you have the right to.
If you do any of these things we may suspend or close your account. Your record is still yours, and you can still take a complete copy of it. Closing an account for misuse does not mean confiscating property.
What belongs to whom
Your record is yours. Your words, your history, your documents. We claim no ownership of any of it.
The service is ours. The software, the design, the name MedSay, the way the record is put together and presented. You get to use it while this agreement is in effect; you do not get to take it.
What you give us permission to do is exactly what the Privacy Policy describes and nothing more. We need permission to store your information, display it back to you, and send it where you tell us to send it, because that is what running the service requires.
Research is separate and optional. If you are asked whether your information may be used in research, that is a separate decision you make on its own. Saying no changes nothing about the service you receive. If you say yes and that research earns money, you get a share.
Money
What the service costs, and what is included, is what we tell you at the time you sign up or when a price changes.
If prices change, you are told before the change affects you, and you can decline by closing your account.
Taking your record with you is always free. We do not charge for a copy of your own property, and we never will.
The AI, and what it can get wrong
Parts of this service use artificial intelligence to read documents, write summaries, and prepare questions. You should know two things about that.
It makes mistakes. It can misread a document, misunderstand something you said, or produce a summary that is incomplete. When you see something that is wrong, tell us, and the correction becomes part of your record.
It never invents the hard facts. Doses, dates, lab values and fill dates are read out of your record by software that does not write prose, so the AI cannot change a number. Every fact shows where it came from. Where two sources disagree, we show you both and ask, rather than picking one for you.
None of it is a substitute for a clinician's judgment.
Ending this agreement
You can close your account at any time, for any reason. Take a copy of your record first. What happens to our copy afterward is set out in the Privacy Policy: we keep holding it for you unless you tell us to delete it, and if you tell us to delete it, we delete it.
We may close or suspend an account for a serious or repeated breach of these terms, or if we are required to by law. Where we can tell you why and give you notice, we do. Either way, you keep the right to a complete copy of your record.
If we ever shut the service down, you get notice well ahead of time and a way to take everything with you. Your record does not disappear because a company stops operating.
Our responsibility, and its limits
We take real care with your information. We hold it encrypted, we limit who can reach it, we record who has looked at it, and we tell you promptly if it is ever exposed. Those commitments are in the Privacy Policy and we mean them.
What we cannot promise. We cannot promise the service is available every minute, that every piece of information arriving from an outside source is complete or correct, or that the service will never be wrong. Information we receive from Medicare, a hospital or a health plan is theirs and we pass it on as we received it.
The service is provided as it is. To the extent the law allows, we make no other warranties.
Limit on what we owe you. To the extent the law allows, our total liability to you for anything arising out of this agreement is limited to the amount you paid us in the twelve months before the claim. We are not liable for indirect or consequential losses.
Nothing in this section limits liability the law does not allow us to limit, including for our own fraud, or for death or personal injury caused by our negligence.
Decisions about your health are yours and your clinicians'. We are not responsible for a medical decision made by you or by anyone treating you.
Changes to these terms
We will change these terms as the service grows. When we do, you are told, by text message or email, and with a notice when you next sign in. We do not change them quietly.
For changes that meaningfully affect your rights, the notice comes before the change takes effect. If you do not want to accept a change, you can close your account and take your record with you.
Agreeing to these terms
You are asked to agree to these terms, and to the Privacy Policy, when you create your account. Nothing is pre-checked. You are asked to read and agree, and you can decline.
Disputes
These terms are governed by the laws of the State of Utah, and any dispute goes before the courts of Utah.
Before anything formal, contact us. Most problems are a misunderstanding and get fixed in a conversation.
About Medicare
If you connect your Medicare information, you are using the Blue Button service operated by the Centers for Medicare and Medicaid Services. You authorize that connection yourself and you can revoke it at any time, here or through your Medicare account.
MedSay is not affiliated with, endorsed by, or connected to CMS, Medicare, or any other government agency.
About the VA
If you connect your VA health record, you sign in on the VA's own page and you authorize that connection yourself. You can revoke it at any time, here or through your VA account.
MedSay is not affiliated with or endorsed by the U.S. Department of Veterans Affairs.
The rest
If part of this agreement turns out to be unenforceable, the rest still stands.
If we do not enforce something straight away, we have not given up the right to enforce it later.
This agreement, together with the Privacy Policy, is the whole agreement between you and us about the service.
Reaching us
Read alongside our Privacy Policy.