Privacy & your health data

Two kinds of information, and the second is sensitive:

• Your account: name, email address, and your password stored in hashed form.
• What you tell us about your health: your age, gender, blood group, allergies and occupation, everything you type or say in a conversation, the summary the AI generates from it, and the specialist it suggested.

If you record a voice note, the audio is sent to be turned into text. The text goes into your conversation.

Needs legal review: Whether the raw audio is retained after transcription, and for how long, needs to be stated here explicitly once the retention behaviour is confirmed and fixed in the backend.

So you can come back to a conversation later, so you can show it to a doctor, and so the app can pick up where you left off. Your health information is not used for advertising and is not sold.

• The AI service that generates replies. What you write is sent to a third-party AI provider to produce the next question and the summary. It leaves our servers to do this.
• Anyone you give a share link to. A share link needs no password. Whoever holds it can read the whole conversation until you unshare it.

We do not otherwise share your conversations. Shared pages are marked so search engines do not index them.

Needs legal review: The AI provider, and the country its servers are in, should be named here. Cross-border transfer of health data is the clause most likely to matter under Pakistan's data protection law once it is in force, and users are entitled to know their symptoms are being processed outside Pakistan if they are.

Needs legal review: There is no retention period defined and nothing is deleted automatically. Conversations persist indefinitely. A retention period appropriate for health records in Pakistan needs to be set, and then actually implemented.

You can ask us to delete your account and everything in it. Until the in-app control exists, this is a manual request.

Needs legal review: There is no way to delete an account or a single conversation from inside the app, and no contact address published for making the request — so the promise of deletion currently has no route to act on. Both need building. A “delete this conversation” control on each chat is the minimum for an MVP handling health data.

Traffic is encrypted in transit and your password is stored hashed, never in readable form. Your conversations are not cached on your device by the app.

The one thing worth knowing: your sign-in token is held in your browser's local storage, so anyone with access to your unlocked phone or computer can open your conversations. Log out on a shared device.

Needs legal review: A data-protection contact address needs to be published here. Without one there is no way for a user to exercise any of the rights described above.