Privacy policy
Med Office Assistant · last updated 10 November 2026
Med Office Assistant is operated by QITC (quantumitcore.com) for medical practices. This policy covers the information it receives when practice staff connect a Google account, what it keeps, and how to remove it.
What Med Office Assistant asks Google for
| Permission | What it is used for |
|---|---|
openid, email | Your Google account's email address and account ID, so the practice can see which account a calendar comes from. |
calendar.calendarlist.readonly | The list of calendars on the account (name, time zone and your access level), so staff can choose which ones to show. |
calendar.events | Reading the events on the calendars the practice chooses to show. It changes an event only to carry out a change a staff member has approved in Med Office Assistant, such as moving an appointment. |
What it keeps
- The account: its email address, Google account ID and status, and when it was connected.
- The sign-in grant Google issues, so Med Office Assistant can keep reading without asking you to sign in again. It is encrypted (AES-256-GCM) with a key held in the practice's secret store, and it is never shown to anyone.
- Each calendar: its name, time zone and your access level, whether it is shown, and which clinician it is linked to.
- Events, only on calendars that are shown, from 7 days before today to 60 days after. For each one it keeps the event's ID and version, status, start and end times and time zone, whether it marks you busy, its type, and any tags Med Office Assistant itself added.
It does not keep an event's title, description, location, guests, attachments or meeting links. It copies no events from calendars that are not shown, and hiding a calendar deletes the events it copied from it.
How it is used
Only to show the practice its schedule, find open times, prepare the morning briefing and answers, and carry out changes that staff have approved. Med Office Assistant does not sell this information, does not use it for advertising, and does not use it to train AI models.
AI processing
An AI model prepares the briefing and answers staff questions, and it reads the schedule to do so. By default the model runs on hardware QITC operates, not on a third-party service. A QITC administrator can switch a practice to Anthropic's Claude. In that case the schedule information the assistant reads, which is appointment times and the practice's own records, is sent to Anthropic to produce the answer. A practice never moves to Anthropic on its own.
Who can see it
Staff of the practice who sign in with a role that allows it, and the QITC operators who run the service. Every change, approval and calendar connection is recorded in the practice's audit log.
Removing access and deleting the data
- In Med Office Assistant: choose Disconnect on the account in Settings › Calendars. Med Office Assistant revokes its access at Google, then deletes the account, its calendars and every event it copied.
- At Google: you can remove access at any time at myaccount.google.com/permissions. Med Office Assistant then stops reading, deletes its stored grant and marks the account for reconnection. Disconnect it in Med Office Assistant to delete the copied data as well.
The audit log is append-only. It keeps a record that an account was connected and disconnected (its email address, when, and by whom) after the account itself is deleted.
Security
Connections to Google and to the console use TLS. The sign-in grant is encrypted at rest. Only the background worker calls Google Calendar; the console and its API never hold the grant.
Google API Services User Data Policy
Med Office Assistant's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Changes and contact
If this policy changes, the date at the top changes with it. Questions or requests: [email protected].