Your health data, and exactly what we do with it.

01 Who we are

AI-Health (“AI-Health”, “we”, “us”, “our”) provides a digital health platform that helps people track and improve their health and enables their care providers to support them.

The platform has two parts:

• The AI-Health patient app — used by individuals (“patients”, “you”) to record and understand their health.
• The AI-Health care-provider dashboard — used by doctors, clinicians, and health-facility staff (“care providers”) to review the data of patients assigned to them and to communicate with them.

Where AI-Health is provided through a hospital, clinic, or other health facility, that facility may act as a joint controller of patient data. This policy describes AI-Health’s own practices.

02 What we collect

Account & profile

When you create an account and set up your profile, we collect your name, mobile phone number (used to sign in), email address, date of birth, gender, occupation, profile photo, preferred language, time zone, and body measurements you provide (height, weight, waist, hip). Care providers additionally provide professional details such as a medical council registration number and certificates.

Health & wellness data

The core purpose of AI-Health is to help you manage your health, so we collect health information you enter, import, or generate. This is sensitive personal data. It may include:

• Glucose — self-monitored (finger-stick) readings and continuous glucose monitoring (CGM) data.
• Vital signs — blood pressure, heart rate, blood oxygen (SpO₂), temperature, respiratory rate, HbA1c, creatinine, and ketones.
• Medications & prescriptions — medicines, dosage and schedule, purpose, and prescription images or documents you upload.
• Lab & medical reports — documents you upload, including text extracted from them.
• Nutrition & meals — food logs, nutritional values, and meal photos and voice notes.
• Activity, fitness & sleep — steps, workouts, calories, and sleep patterns and quality.
• Symptoms, mood & check-ins — symptoms and severity, mood entries, and daily check-ins.
• Medical & lifestyle history — conditions and family history, diabetes history, food and drug allergies, and lifestyle details such as alcohol, smoking, and eating and sleep habits.
• Reproductive health — where you choose to provide it: pregnancy status and stage, menopause status, menstrual regularity, and contraception use.
• Care content — messages with your care team, care plans, and insights and summaries generated for you.

Communications & content

We collect the content you create: chat messages with your care team, photos (for example of meals, prescriptions, or reports), and audio and voice recordings (for example voice logging of meals or workouts).

Device, technical & location data

We collect information about your device and app: device type, model, manufacturer, operating-system version, app version, and a push-notification token. Where you grant permission, we collect device location to support location-based features. We also process technical logs generated when you use the service.

03 Connected devices & services

With your permission, AI-Health can bring in health data from devices and services you connect:

• Apple Health (HealthKit) and Google Health Connect — to read health and fitness data such as steps, heart rate, glucose, blood pressure, sleep, and oxygen saturation.
• Abbott LibreView / LibreLinkUp — to import CGM readings from your Freestyle Libre account, including where you scan a sensor directly with your phone (NFC).
• Sinocare and similar glucometers — to import glucose readings.

To use these features, the app may request access to your camera, microphone and speech recognition, photo library, Bluetooth, NFC, motion and activity, notifications, biometric unlock, and location. You control every permission in your device settings and can change it at any time; some features will not work without the relevant permission.

04 How we use your information

• To provide the service — create and manage your account, record your health data, and show your trends, reports, and insights.
• To enable care — make your data available to the care providers assigned to you so they can review it, message you, and support your care.
• To generate insights — produce summaries, briefs, and personalised guidance, including through AI (see Section 5).
• To communicate — send push notifications, reminders, and service messages, and respond to support requests.
• To operate & improve — secure, maintain, troubleshoot, and improve the platform.
• To comply with law — meet legal, regulatory, and record-keeping obligations and protect the rights and safety of users.

We do not sell your personal data, and we do not use your health data for third-party advertising.

05 AI & automated processing

AI-Health uses artificial intelligence to help interpret your data — analysing meal photos, extracting information from prescriptions and reports, transcribing voice notes, and generating summaries, briefs, and answers to your questions.

To do this, relevant parts of your information (which may include health data, images, text, and audio) are processed by trusted AI providers acting on our behalf (see Section 7). They process your data only to perform the service for us, under contractual confidentiality and security obligations. AI-generated output is informational and is not a medical diagnosis or professional medical advice.

06 How we share your information

• With your care providers. When you are linked to a doctor, clinic, or health facility, the care providers assigned to you can access your health record on the dashboard to support your care, and may request a copy (export) of the data of patients assigned to them.
• With service providers. We share data with the companies in Section 7 that provide infrastructure and functionality on our behalf.
• Community features. If you join buddies, groups, challenges, or leaderboards, other participants may see limited activity signals such as points, streaks, and goal progress. Your clinical data — glucose values, medications, reports — is never placed on leaderboards.
• For legal reasons. Where required by law, regulation, or valid legal process, or to protect the rights, safety, and security of users, the public, or AI-Health.
• Business transfers. If AI-Health is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

07 Service providers

To run AI-Health, we rely on a small number of established service providers who process personal data only on our behalf, only as needed to provide their service, and under confidentiality and data-protection obligations. They fall into these categories:

• Cloud hosting & storage — to securely host the platform and store your files (documents, prescriptions, reports, images, audio), within India.
• Authentication & notifications — to sign you in securely and deliver push notifications.
• AI & machine learning — to analyse your data, transcribe voice, and generate insights and summaries. Some of these providers may process data outside India.
• Communications — to deliver messages through the channels you choose to use.

Separately, you can choose to connect third-party devices and accounts (see Section 3); those are controlled by you and named there.

A current list of the specific providers we use is available on request — email privacy@aihealth.clinic.

08 Storage & security

Your data is primarily stored and processed on secure cloud servers located in India. Some service providers, including certain AI providers, may process limited data on infrastructure outside India; where they do, we rely on appropriate safeguards and contractual protections.

We apply reasonable technical and organisational measures designed to protect your information, including encryption of data in transit, access controls, and limiting access to authorised personnel and to the care providers assigned to you. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

09 Retention & deletion

We keep your personal and health data for as long as your account is active and as needed to provide the service, and thereafter as required to meet legal, regulatory, clinical record-keeping, and legitimate business obligations.

Deleting your account. You can request deletion by contacting us (Section 13). When you delete your account, we delete your profile and associated account data. Certain records may be retained for a limited period where necessary for legal or regulatory reasons, or held in backups, after which they are deleted or anonymised.

Exporting your data. You can request a copy of your data. Where an export is generated, it is provided as a downloadable file available for a limited time (currently 7 days) before it is removed.

10 Your rights & choices

Subject to applicable law — including India’s Digital Personal Data Protection Act, 2023, and other laws that may apply to you — you have the right to:

• access the personal data we hold about you and request a copy;
• correct or update inaccurate or incomplete data;
• request deletion of your data;
• withdraw consent you have given (this won’t affect processing already done, and may limit features);
• manage device permissions — camera, location, health data, notifications — in your device settings;
• raise a grievance about how we handle your data.

To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before acting on your request.

11 Children

AI-Health can be used by people of all ages, including children. Where the account holder is a child, the account should be created and managed by a parent or legal guardian, who is responsible for the information provided and for the child’s use of the service. We handle a child’s health data with the same care and safeguards as any other user’s, and only as described in this policy. If you are a parent or guardian with questions about your child’s data, contact us using the details in Section 13.

12 Changes to this policy

We may update this policy from time to time. When we make material changes, we update the “Effective” date above and, where appropriate, notify you in the app or by other means. Your continued use of AI-Health after an update means you accept the revised policy.

13 Contact us

Questions, requests, or complaints about this policy or your data? Reach us at:

• Email — privacy@aihealth.clinic
• Privacy grievances — grievance@aihealth.clinic