Privacy Policy

1. INTRODUCTION  

This Privacy Policy explains how we process information in our AI-powered healthcare application. We comply with:  

- GDPR (EU/UK)  

- CCPA/CPRA (California)  

- HIPAA (for non-covered entities guidance)  

- PIPEDA (Canada)  

Key Principles:  

- No collection of personal health identifiers  

- Anonymous processing of health queries  

- No creation of user profiles  

- No sale of data to third parties  

2. INFORMATION WE PROCESS  

2.1 User-Provided Data  

- Health Inquiries: Symptom descriptions and general health questions  

- Demographic Context: Age range (e.g., "30s") and biological sex when medically relevant  

- Subscription Preferences: Free trial selections and upgrade choices  

2.2 Automatically Collected Data  

- Session ID   

- Device OS  

-Interaction Events  

2.3 Special Category Data  

- Health-related inputs are processed under:  

  - GDPR Article 9(2)(a) - Explicit consent  

  - CCPA "limited use" exemption  

- Safeguards:  

  - End-to-end encryption for all transmissions  

  - On-device processing where possible  

  - Automatic data minimization  

3. THIRD-PARTY SERVICES  

3.1 AppMetrica  / https://yandex.com/legal/confidential/

3.2 RevenueCat / https://www.revenuecat.com/privacy 

4. DATA USES & LEGAL BASES  

- Provide AI health responses - Performance of contract - Health inquiries 

- Improve response accuracy - Legitimate interest - Anonymized query patterns

- Subscription management - Contract necessity - Purchase status  

- Critical bug resolution - Legal obligation - Crash reports 

5. DATA WE NEVER COLLECT  

- Real names or contact information  

- Precise location data  

- Government IDs or health insurance details  

- Payment card information  

- Facial recognition data  

- Genetic or biometric data  

6. DATA RETENTION & SECURITY  

- Health Conversations:  

  - De-identified after 72 hours  

  - Fully deleted after 90 days  

- Technical Logs:  

  - Anonymized

  - Aggregated 

- Security Measures:  

  - AES-256

  - TLS 1.3

  - SOC 2-compliant 

7. AGE RESTRICTIONS  

- Not intended for users under 13   

- Parental consent required for 13 age group  

- No collection of birthdates or school information  

8. POLICY CHANGES  

Our Privacy Policy may change which will not reduce your rights under this Privacy Policy from time to time, we will post any privacy policy changes on this page, so please review it periodically. If you do not agree to any modifications to this Policy, your could immediately stop all use of all the Services. Your continued use of the Site following the posting of any modifications to this Policy will constitute your acceptance of the revised Policy. 

9. CONTACT INFORMATION  

If you have any questions or comments about this Policy or our privacy practices, or to report any violations of the Policy or abuse of the Services or the App, please contact us at aidoctor@cbmobile.by