The Resolvent Sovereign Privacy Principle:
Your research, laboratory notes, experimental datasets, and draft manuscripts belong solely to you and your institution. Medhira Resolvent operates under a strict Zero-Model-Training and Local-First architecture: we do not sell your data, and we never train AI foundation models on your private files.
1. Scope & Data Controller
This policy governs the Medhira Resolvent web platform (res.medhiraai.com), the Android application (ai.medhira.resolvent), the desktop workstation client, and associated AWS Cognito / S3 services. The Data Controller is Medhira AI Inc..
2. Information We Collect
- Identity & Account: Name, academic title, institutional email (e.g.
@institution.edu), academic role, research discipline, and OTP verification status.
- Federated SSO: Cryptographic OAuth tokens from Google, Microsoft Entra ID, Facebook, and institutional SAML/eduGAIN federations. We never store third-party passwords.
- Compute & Vault Telemetry: Watt-hour allocation tracking against your daily 3,000 Wh clean compute battery ($3.00/day credit) and personal S3 vault volume (2,048 MB quota).
3. Zero-Knowledge Local Processing
Super File Converter and Data Analysis Studio execute 100% in-browser on your device via client-side WebAssembly and HTML5 Canvas. Zero raw file bytes are uploaded to remote servers during conversion or statistical analysis.
4. Absolute Prohibition of AI Model Training
No confidential manuscripts, proprietary laboratory notes, experimental results, connected Google Drive / OneDrive files, or personal vault documents are ever ingested, indexed, or utilized to train, pre-train, fine-tune, distill, or evaluate any artificial intelligence or machine learning model.
5. Evidence-Grounded Mandate & Explicit Abstention
Every factual answer generated by the Scientific Copilot is grounded in verifiable peer-reviewed literature (OpenAlex, Crossref, Europe PMC) or user vault documents. When literature lacks conclusive evidence, the system is programmed to enter an explicit Abstention State (Status: ABSTAIN) rather than hallucinating speculative text.
6. Security & Android KeyStore Enclave
All network communications use TLS 1.3 with Perfect Forward Secrecy. On mobile devices, authentication tokens are isolated in the Android hardware enclave using AES-256-GCM encryption with tenant AAD and protected by window FLAG_SECURE anti-screenshot technology.
7. Self-Service Account Deletion (Google Play Compliance)
Users hold an absolute right to permanent erasure. Initiating account deletion from Settings permanently purges user profile attributes in AWS Cognito, removes encrypted S3 vault files, and revokes cryptographic tokens within 0 hours.
8. Contact & Data Protection Officer
For questions or Data Subject Access Requests (DSAR), please submit inquiries through the official Medhira Resolvent Platform Governance Core.