Gobycon Med: Terms and Conditions

Last Update: 13/9/2025

1 Acceptance of Terms

By registering for and/or using the Gobycon Med EHR (GMed EHR) service ("the Service"), you agree to be bound by these Terms and Conditions ("Terms"). If you do not agree to all the Terms, you may not access or use the Service.

2 Definitions

"Account" refers to your personal Gobycon Med EHR profile.
"Content" or "Health Records" refers to all electronic data, including medical documents, images, notes, and personal information, uploaded to or generated within the Service.
"Member," "You," "Your," "User" refers to the individual who subscribes to the Service and their dependents covered under the subscription.
"Legacy Contact" or "Executor" refers to an individual you legally designate to access your Account after your death.
"Post-Mortem Period" refers to the 6-year period following the verified death of the Member.
"Membership ID" refers to the randomized, unique code issued to you for accessing your Account.
"Temporary Access Link" refers to a time-bound, password-protected link providing limited access to a specific folder within your vault, sent via encrypted email.

3 Membership & Subscription

Fees and Payment: Membership is offered on a monthly subscription basis. Fees are payable in advance and are non-refundable, except as required by law. We will notify you of any price changes 30 days in advance.
Automatic Renewal: Your subscription will automatically renew at the end of each term unless you cancel your account before the renewal date.
Plan Changes: You may upgrade or downgrade your plan at any time; the new rate will take effect at the start of the next billing cycle.

4 The Service

4.1. Gobycon Med provides a platform for the storage and management of Electronic Health Records (EHR).

4.2. Anonymized Account: Your account is accessed solely via a randomized Membership ID. You are responsible for safeguarding this code. Gobycon Med has no ability to recover health data linked to a lost code.

4.3. Data Ownership: You retain all ownership of the health data you upload. You grant Gobycon Med a limited license to store, encrypt, and transmit this data solely for the purpose of providing the Service.

4.4. Billing Information: To subscribe to a paid plan, you must provide accurate billing information to our third-party payment processor. This information is stored separately from your Health Data and is used strictly for payment and invoicing.

5 Data Storage & Sharing

5.1. Storage: You agree to the storage of your health data on Zoho WorkDrive servers, under the terms of our Data Processing Addendum (DPA) with Zoho.

5.2. Sharing: By requesting a temporary access link for a specific folder, you authorize Gobycon Med to generate a link that provides limited access only to that folder's contents. You authorize us to dispatch this link via Microsoft 365 encrypted email to your designated recipient. You are solely responsible for ensuring the correct email address is provided.

5.3. Limited Permissions: Recipients of temporary links will only have access to the designated folder and its contents, not your entire vault.

5.4. Your Responsibilities: You warrant that you have the legal right to upload all health data you provide. You are solely responsible for the accuracy and completeness of the data in your vault.

5.5. Uploading by Third Parties: If you grant "upload" permissions to a folder via a temporary link, you are solely responsible for any content that third parties place in that folder. Gobycon Med does not monitor or validate content uploaded by third parties.

6 Data Storage Duration

Storage Period: Your chosen data storage duration (20 years, 40 years, Lifetime) begins on the date your Account is activated.
Lifetime Definition: "Lifetime" is defined as the duration of the Member's natural life, commencing from the Account activation date.
Post-Mortem Extension Clause: This clause is exclusive to the Legacy Plus plan.
- Upon Gobycon receiving valid, verifiable proof of the Member's death (e.g., a death certificate), the 6-year Post-Mortem Period will commence.
- During this period, the Account will be converted to a "Legacy Status." The designated Legacy Contact will be granted access solely for retrieving the Member's health records.
- Data Deletion: Precisely 6 years and 30 days after the verified date of death, all Content within the Account will be permanently and irrevocably deleted from Gobycon's servers and backups.
Plan Lapse or Non-Payment: If your subscription lapses and is not renewed after a 90-day grace period, Gobycon reserves the right to deactivate and subsequently delete your Account and all associated Content. It is your responsibility to download your data before cancellation.

7 User Responsibilities

Account Security: You are responsible for maintaining the confidentiality of your Membership ID and for all activities that occur under your Account.
Data Accuracy: You are solely responsible for the accuracy, quality, and legality of the Health Records you upload. Gobycon is a storage platform and does not verify the medical accuracy of user-provided Content.
Legacy Contact: It is your responsibility to inform your designated Legacy Contact of their role and to provide them with the necessary instructions for claiming access.

8 Our Responsibilities (Limitation of Liability)

Service Availability: Gobycon will strive to ensure the Service is available but does not guarantee uninterrupted, secure, or error-free operation.
Data Integrity: While we employ industry-standard encryption and security practices, Gobycon cannot guarantee protection against all cyber-incidents, including unauthorized access, hardware failure, or force majeure events. You use the Service at your own risk.
Medical Disclaimer: Gobycon Med is a data storage and transmission service. We are not a healthcare provider. The content of your EHR is not reviewed by us for accuracy or clinical validity. We disclaim any liability for medical decisions made based on the data stored or shared through our service.
Identity Verification: Due to our anonymized model, WE CANNOT AND DO NOT VERIFY THE IDENTITY of the individual setting up an account or uploading data. The individual using the Membership ID is presumed to be the rightful owner of the data. We are not liable for fraudulent account creation or data upload.
Limitation of Liability: To the fullest extent permitted by law, Gobycon Med EHR, its affiliates, and its staff shall not be liable for any indirect, incidental, special, or consequential damages resulting from the use or inability to use the Service.

9 Indemnification

You agree to indemnify and hold harmless Gobycon Med from any claims arising from your use of the service, including, but not limited to: the uploading of data you do not have the right to use, the incorrect sharing of data due to a mistakenly provided email address, or any medical outcomes related to the data stored within your vault.

10 Privacy

Your privacy is paramount. Our Privacy Policy (incorporated by reference herein) details how we collect, use, and protect your personal and health information. We adhere to applicable data protection laws but are not a "Covered Entity" under HIPAA. You are uploading data on your own behalf.

11 Termination

You may terminate your Account at any time. Upon termination, you may request your data within a 30-day window. After 30 days, your Account and all Content will be scheduled for permanent deletion. Deletion of your health data is irrevocable.

12 Governing Law

These Terms shall be governed by the laws of [Your State/Country], without regard to its conflict of law provisions.

13 Contact Information

For questions about these Terms or the Service, please contact us at:
Gobycon Med Support
Email: info@gobyconmed.com