Last Updated: 1 January 2026
Privacy Policy – MaxTrack and TDUX Sleep-Screening Applications
Sleep-Screening Applications
This section applies specifically to the MaxTrack and TDUX mobile applications provided by Medien Malaysia for patients participating in sleep-screening programmes operated by participating clinics.
MaxTrack and TDUX are separate from the Medien MY shopping application described elsewhere in this Privacy Policy. Because these applications process health-related information as part of a sleep-screening programme, the terms in this section apply specifically to their use.
Access to MaxTrack or TDUX is provided when a participating clinic invites you to join a screening programe and provides you with a compatible fingertip sensor ring.
These applications are not general consumer applications.
1. Information We Collect
Health Information from the Sensor Ring
When you wear the clinic-issued sensor ring overnight, the ring records health-related measurements including:
| Blood oxygen saturation (SpO₂) |
| Pulse rate |
The application transfers recordings from the ring through Bluetooth and sends the relevant recordings and results to your care team.
Information associated with a recording may include:
| Average blood oxygen level |
| Lowest blood oxygen level |
| Counts and durations of oxygen desaturation events |
| Estimated time asleep |
| Step count |
| Signal-quality assessment |
| Sleep-oxygen score |
Device and Technical Information
To identify recordings, support equipment management and troubleshoot technical issues, the application may process:
| Ring serial number |
| Ring firmware version |
| Ring hardware version |
| Ring battery level |
| Recording date and time |
| Transfer date and time |
| Mobile-device model |
| Mobile operating-system version |
| Application version |
Programme Identifiers
When you redeem an invitation code issued by a participating clinic, the application receives and uses:
| A pseudonymous participant identifier |
| A study or programme identifier |
These identifiers allow recordings to be associated with the appropriate screening programme without requiring you to create a conventional user account.
2. Information We Do Not Collect
MaxTrack and TDUX do not require a conventional user account or sign-in.
The applications do not collect your:
| Name |
| Email address |
| Password |
| Contacts |
| Photos |
| Personal files |
| Payment information |
| Advertising identifiers |
Your clinic, rather than the application, maintains the record that links your pseudonymous participant identifier to you.
Location Information
The applications do not collect or use your location for tracking purposes.
On certain older Android versions, Android may require location permission before an application can scan for nearby Bluetooth devices.
Where this permission is required, it is used solely to enable discovery of the sensor ring. The application does not use the permission to determine your physical location.
Newer supported Android versions use Bluetooth permissions that are declared as not being used to derive location.
We do not:
| Track you for advertising purposes |
| Share your information with advertisers |
| Sell your health or personal information |
3. Information Stored Only on Your Device
Certain information entered into the application is stored locally on your device.
This may include:
| Sex |
| Age |
| Height |
| Weight |
| Answers to in-application sleep questionnaires |
This information is used locally by the application to present your results.
Based on the current application implementation, this information is not transmitted by the application to Medien Malaysia or your clinic.
Information stored locally is removed when the application’s data is cleared or the application is uninstalled.
4. How We Use Your Information
Information processed through MaxTrack or TDUX may be used to:
| Transfer overnight recordings to your care team |
| Support your participation in the sleep-screening programme |
| Display your own progress and results |
| Identify missing screening nights |
| Support recording and data-transfer functions |
| Diagnose transfer failures |
| Troubleshoot application or equipment issues |
| Maintain the reliability and security of the service |
We do not use this information for:
| Advertising |
| Marketing profiling |
| Behavioural tracking |
| Automated decisions about you |
Clinical interpretation and healthcare decisions remain the responsibility of your healthcare provider.
5. Who We Share Information With
Your Participating Clinic and Care Team
Recordings collected during the programme are provided to the participating clinic or care team for the purposes of the screening programme.
Healthcare professionals may have access to clinical details contained within the recordings, including information that may not be displayed directly to you in the application.
Service Providers and Data Hosting
We may use authorised service providers to provide technical infrastructure, hosting, maintenance and other services necessary to operate MaxTrack and TDUX.
Health recordings and associated programme data processed through MaxTrack and TDUX are hosted and stored in Malaysia.
Where a service provider processes information on our behalf, the provider is required to process the information only for authorised purposes and in accordance with our instructions and applicable privacy and data-protection requirements.
Legal Requirements
We may disclose information where required to comply with applicable laws, regulations, legal processes or lawful requests from authorities.
We do not sell your health or personal information, share it with advertisers or use it for advertising purposes.
6. Diagnostic and Crash Reporting
Released versions of MaxTrack and TDUX may report application crashes and technical errors to a diagnostic service operated by Medien.
Diagnostic information may include:
| Application version |
| Device model |
| Operating-system version |
| Technical information relating to the error or fault |
Before a crash report leaves your device, it is processed through a filter designed to remove identifying information such as sensor-ring serial numbers.
Crash reporting helps Medien identify technical faults that could otherwise result in recordings being lost or transfers failing.
You may also choose to send a diagnostic report through the application’s settings.
Such a report may contain:
| Recent transfer activity |
| Technical logs |
| Ring identifiers |
| Study or programme identifier |
This diagnostic report is sent only when you choose to submit it.
7. How We Protect Your Information
We use technical safeguards designed to protect recordings and associated information.
Raw recordings stored on your phone are encrypted using a key held within the phone’s hardware-supported keystore.
Recordings are transmitted through an encrypted connection.
Uploads also contain a checksum that allows the system to detect whether a recording has been altered, corrupted or transferred incompletely.
8. Data Retention on Your Device
Information stored by the application on your device is retained according to the following schedule:
| Information | Retention Period |
| Encrypted raw recording | 30 days after your care team confirms receipt, then automatically deleted |
| Recording summaries and history | 90 days |
| Transfer logs | 90 days |
When your clinic closes your participation in the programme, the application is designed to:
| 1. Deliver any recordings that are still waiting to be transferred; |
| 2. Delete recordings and history stored on your device; |
| 3. Revoke the application’s access credential; and |
| 4. Destroy the local encryption key. |
Information Stored on Our Server
Health recordings and associated programme information stored on the MaxTrack or TDUX server are retained for up to 365 days.
After the applicable retention period, information will be deleted or otherwise securely disposed of in accordance with our applicable data-retention procedures, unless a longer retention period is required by applicable law or another lawful requirement.
9. Your Choices and Privacy Rights
You may stop participating in the programme and stop using the application at any time.
If you wish to discontinue participation, contact your participating clinic and arrange to return the clinic-issued sensor ring where applicable.
Because your participating clinic maintains the information connecting your pseudonymous participant identifier to you, you may contact the clinic regarding your screening records.
You may request access to, correction of, or deletion of applicable information, subject to applicable legal and retention requirements.
Privacy Enquiries and Requests
For privacy questions or requests relating to MaxTrack or TDUX, please contact:
Medien Malaysia – MaxTrack/TDUX Privacy
Email: maxtrack@medien.my
When submitting a privacy request, please provide sufficient information for us to understand and process your request. For security and privacy reasons, additional verification may be required before information is disclosed, corrected or deleted.
Application Permissions
You may decline notification or background-activity permissions.
The application can continue to operate; however, automatic overnight transfers may not complete in the background. You may therefore need to open the application to complete the transfer manually.
10. Children’s Privacy
MaxTrack and TDUX are intended for adults aged 18 years and above.
The applications are not directed at children.
11. Medical and Clinical Disclaimer
MaxTrack and TDUX present wellness information to support a screening programme operated by your healthcare provider.
The applications:
| Do not diagnose medical conditions |
| Do not provide medical advice |
| Do not replace consultation with a qualified healthcare professional |
Results should be discussed with your clinician or healthcare provider.
Do not use information displayed by the application as a substitute for professional medical assessment, diagnosis or treatment.
12. Changes to This Privacy Policy
We may update this Privacy Policy when necessary to reflect changes to MaxTrack or TDUX, applicable requirements, security practices or the way information is processed.
Where appropriate, the updated version will be published on Medien’s official Privacy Policy page.
[bmi]