This Privacy Policy describes how Medatech Systems Ltd. ("we", "us", or "our") handles information in connection with the MedaLink VPN mobile application (the "App").
What MedaLink VPN is
MedaLink VPN is an enterprise VPN client. Your IT administrator provisions it with a QR code and a serial code so your device can securely reach your organization's internal business systems when you are off the corporate network. It is a split-tunnel VPN: only connections to your organization's specific internal servers are routed through the VPN — your other internet traffic is not.
Information we collect
When you activate the App with your serial code, and while it is connected, the App sends the following to your organization's provisioning server:
- Device identifiers — a randomly generated per-installation device identifier and the device's VPN public key, used to enroll and authenticate your device.
- Device information — device name, model, and operating-system version, used to register and support the device.
- Device security status — the results of on-device security checks (for example whether the device appears jailbroken, debugged, or running in an emulator), used to enforce your organization's security policy. This is reported when you connect and periodically while connected.
- Network address — the App establishes a VPN connection; the internal IP address used inside the tunnel is assigned by the service as part of the VPN configuration.
We do not collect your contacts, photos, location, browsing history, messages, or the contents of your internal traffic.
How we use it
Solely to provision your device, establish and secure your VPN connection, and enforce your organization's device-security policy. We do not sell or share your information with data brokers, and we do not use it for advertising or cross-app tracking.
VPN traffic
The VPN routes only the connections to your organization's designated internal servers. We do not inspect, log, or retain the contents of that traffic.
Data sharing
Your information is processed on behalf of your organization (your employer or the entity that issued your serial code). We do not share it with third parties except as required to operate the service for your organization or as required by law.
Retention
Enrollment and device-security records are retained for as long as your device is enrolled, and deleted within 90 days after your device is de-provisioned or your organization's account is closed.
Your choices
Your organization manages your enrollment. To remove your device, ask your IT administrator to revoke it, or delete the App — deleting the App stops all data collection by the App.
Children
MedaLink VPN is a workplace tool and is not directed to children.
Changes
We may update this policy; the "Last updated" date will change accordingly.
Contact
Medatech Systems Ltd. — support@medasys.tech