Privacy Policy

Your Privacy Matters
Last Updated: January 2025

DoctorsAppointment.ai (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

This app uses OpenAI’s GPT-4o to power the AI Health Assistant.

• Your chat messages are sent to OpenAI for processing.
   
• Premium users who enable personalized responses may also share a summary of their health profile (e.g., medications, allergies, conditions) with OpenAI.
   

See Section 2 for complete details.

• Your health profile and medical records are stored locally on your device.
   
• We use encryption and industry-standard security practices to protect your data.
   
• Only chat messages (and optional health profile summaries for Premium users) are transmitted to our AI service provider.
   

When you use DoctorsAppointment.ai, we may collect:

• Personal Information: Name, email address, date of birth, gender
   
• Health Information: Medical history, symptoms, allergies, medications, chronic conditions, health queries
   
• Account Information: Login credentials, subscription status
   
• Communication Data: Support inquiries, feedback, ratings
   

If you register as a healthcare provider, we collect:

• Professional Information: Name, credentials, specialty, practice description
   
• Contact Information: Email, phone, WhatsApp, Telegram, website
   
• Location Information: Country, region, city, postal code
   
• Profile Media: Professional photo
   
• Subscription Information: Provider tier (Pro/Elite), payment status
   

Note: Provider profile information is stored on our servers (see Section 3).
 

• Device type, operating system, unique device identifiers
   
• Usage data (features used, timestamps, session duration)
   
• Log data (IP address, access times, error logs)
   
• General location data (country/region based on IP address)
   

• Payment processors (subscription status only — not payment details)
   
• App store platforms (subscription management)
   

The following data is stored locally on your device only and is not transmitted to our servers:

• Complete health profile (medications, allergies, conditions, medical history)
   
• Medical record images (MRI, X-ray, lab reports, etc.)
   
• Chat conversation history
   
• Personal preferences and settings
   

You may delete this data at any time through app settings.

DoctorsAppointment.ai uses the OpenAI GPT-4o API to provide AI Health Assistant responses.

For all users:

• Chat messages and questions
   
• Images you choose to share for visual analysis
   
• Previous AI responses within the current session (for context)
   

For Premium users (with consent):

• Medication list
   
• Allergy list
   
• Chronic conditions
   
• Age range (e.g., “30–49”)
   
• Gender (if provided)
   
• Smoking status (if provided)
   

We never transmit:

• Exact date of birth
   
• Full name, email, phone number, or address
   
• Stored medical record images
   
• Previous chat history
   
• Payment or subscription details
   
• Device identifiers or IP address
   

According to OpenAI’s API policy:

• API data is not used to train models
   
• Data may be retained for up to 30 days for abuse monitoring
   
• Data is deleted after 30 days unless legally required
   

OpenAI Privacy Policy:
https://openai.com/policies/privacy-policy

• Using the AI Health Assistant implies consent to transmit chat messages to OpenAI
   
• Premium users explicitly consent when enabling Personalized AI Responses
   
• You may disable personalization at any time in settings
   

Provider Directory data is stored on our cloud servers (Supabase).

For providers:

• Profile details, credentials, photo
   
• Contact methods
   
• Location information
   
• Subscription status
   
• Availability status
   

For patients:

• Provider unlock records
   
• Unlock timestamps and expiration
   
• Transaction IDs (no payment details)
   

We collect:

• Profile view counts
   
• Contact clicks
   
• Search referral data
   

This data helps improve platform functionality.

• Profiles must be searchable
   
• Unlock records must persist across devices
   
• Availability requires real-time updates
   
• Analytics require centralized processing
   

• Provider profiles are publicly searchable
   
• Contact information is hidden until unlocked
   
• Availability status is visible when enabled
   
• Location data is shown for filtering only
   

Providers may:

• Edit profiles
   
• Unpublish listings
   
• Request deletion
   
• Toggle availability
   
• Update contact methods
   

• Provide educational AI responses
   
• Manage subscriptions
   
• Improve app functionality
   
• Provide customer support
   

• Display provider profiles
   
• Process contact unlocks
   
• Track visibility analytics
   
• Manage provider subscriptions
   

• Safer AI responses using profile context
   
• Preference storage
   
• Educational personalization
   

• Service notifications
   
• Support responses
   
• Important app updates
   

• Fraud prevention
   
• Security monitoring
   
• Legal compliance
   

• Feature usage analysis
   
• Platform optimization
   
• Anonymized research
   

Patient health data is:

• Encrypted locally
   
• Stored only on your device
   
• Deleted at your discretion
   

Cloud-stored data includes:

• Provider profiles
   
• Unlock records
   
• Analytics
   
• Account authentication
   

Security measures include:

• Encryption at rest
   
• Row-level security
   
• Secure authentication
   

• TLS/HTTPS encryption
   
• Secure API communication
   
• Encrypted storage
   
• Access control policies
   

No system is 100% secure. You acknowledge inherent risks.

We will notify users of breaches as required by law.

We do not sell or rent your data.

Used solely for AI processing as described.

Used for provider directory storage under strict agreements.

• RevenueCat (subscriptions)
   
• App stores (billing)
   
• Analytics (anonymized only)
   

• Full health profiles
   
• Medical images
   
• Sensitive personal identifiers
   

Provider visibility is intentional and user-controlled.

We may disclose data when legally required.

Users will be notified of data transfers during mergers or acquisitions.

• Access and portability
   
• Correction and deletion
   
• AI personalization controls
   
• Communication preferences
   

Deletion requests processed within 30 days.

DoctorsAppointment.ai is not intended for users under 18.

Data may be processed in the United States under appropriate safeguards.

We use:

• Local storage
   
• Analytics tools
   
• Session identifiers
   

Controls available via device settings.

• Local data retained until deletion
   
• Cloud data retained per operational needs
   
• OpenAI retains data up to 30 days
   

Changes will be posted in the app and communicated when required.

Email: support@doctorsappointment.ai

Privacy Team
DoctorsAppointment.ai

We aim to respond within 30 days.

EU residents may contact their local data protection authority.