Contents
MedSync X (the “App”) is developed and operated by Thai Exclusive Co., Ltd. (“we”, “us”, “our”), a company registered in Thailand (registration no. 0105560131309), with its registered office at 66/51 Soi Lat Phrao 80 Yaek 22, Wang Thonglang, Wang Thonglang, Bangkok 10310, Thailand.
The App helps users obtain preliminary, non-diagnostic health information and connects users with licensed medical services provided by World Medical Hospital (operated by Bangkok Chain Hospital Public Company Limited). We act as a facilitator; we do not provide medical diagnosis or treatment ourselves.
This policy explains what personal data we collect, how we use it, who we share it with, and the choices and rights you have. We process personal data in accordance with Thailand’s Personal Data Protection Act (PDPA) and applicable law.
We collect data directly from you when you create an account, enter information into the App, use the AI feature, or contact us. We also collect limited technical data automatically as you use the App (for example, crash logs and basic usage analytics).
The App includes an AI assistant that provides preliminary, non-diagnostic information based on what you describe. When you use this feature, the symptoms and health information you enter, together with your conversation messages, are transmitted to OpenAI (OpenAI, L.L.C., United States) through its API in order to generate a response.
We request your explicit in-app consent before any data is sent to OpenAI for the first time. According to OpenAI’s API data usage policies, data submitted through the API is not used to train its models by default. We confirm that this third party provides data protection equivalent to that described in this policy.
We share personal data only as described below, and only to the extent necessary:
We do not sell your personal data.
Some recipients, including OpenAI, are located outside Thailand (for example, in the United States). When we transfer personal data abroad, we take steps intended to ensure an adequate level of protection consistent with applicable law, including the PDPA’s requirements for cross-border transfers.
We ask for your explicit consent in the App before sending your data to the AI feature. You can decline; if you do, the AI feature is disabled, and the rest of the App remains available. You may withdraw your consent at any time in the App’s Settings, which turns off the AI feature and stops further data being sent to OpenAI. Withdrawing consent does not affect processing carried out before withdrawal.
We keep personal data only for as long as needed for the purposes described in this policy, or as required by law.
You can delete your account at any time from within the App (Profile → Delete Account). When you confirm deletion, we immediately disable access to your account and sign you out, and your personal data is scheduled for permanent deletion within 30 days. After this period, your personal data is permanently deleted or irreversibly anonymized, except for limited information we are required to retain by law (for example, certain medical or transaction records), which we keep only as long as legally required.
Subject to applicable law, you have the right to:
To exercise any of these rights, contact us using the details in Section 14.
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, including encryption in transit. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it.
The App is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.
If you have questions about this policy or wish to exercise your rights, contact us at: