Privacy Policy
We take your health data seriously. Here's exactly how we handle it.
Who We Are
HealthAI is operated by Digital Miles (Pvt.) Ltd., based in Islamabad, Pakistan. This Privacy Policy explains how we collect, store, use, and protect your information when you use the HealthAI app.
Medical Disclaimer
HealthAI is a personal health-information organizer and informational tool. It is not a medical device and does not provide medical advice, medical diagnoses, treatment recommendations, prescriptions, or emergency services. Information and AI-generated content shown by HealthAI may be incomplete, inaccurate, or unsuitable for your individual circumstances.
HealthAI does not replace a qualified doctor or other healthcare professional. Always consult a qualified healthcare professional about symptoms, test results, medicines, treatment, and other medical decisions. Do not ignore or delay professional medical care because of information shown in HealthAI.
If you believe you or another person may be experiencing a medical emergency, contact your local emergency services immediately. Do not rely on HealthAI for emergency assistance.
What Information We Collect
We collect account information that you enter during registration or profile management, including your name, email address, and consent choices. Your 4-digit PIN is collected through the PIN screen and stored only as a salted cryptographic hash.
We collect profile and health information that you enter or upload through the app. This may include names, dates of birth, gender, blood group, height, weight, blood pressure, pulse, symptoms, diagnoses, medicines, prescriptions, medical reports, test results, doctor notes, hospital details, and dependant or family profiles.
We collect chat prompts, files and images you choose to attach, AI-generated responses, and technical security records such as sign-in events, request time, IP address, device or browser user-agent, and audit activity. We collect these when you type, upload, import, sign in, or use the relevant feature.
We use Google Analytics to collect limited app-usage information, including page views, approximate location derived from IP address, device and browser information, and interaction events that we deliberately configure. We do not send names, email addresses, medical records, prescription names, symptoms, lab values, uploaded files, or AI chat text to Google Analytics.
Google Analytics is optional. We ask for your permission before loading it. If you decline, HealthAI remains available and the Google Analytics tags are not loaded. Your choice is stored on your device so we can remember it.
How We Use Your Information
We use account and health information to authenticate you, secure your account, save and synchronize your records, organize family profiles, display health history and trends, generate exports, provide support, prevent misuse, and operate and improve HealthAI's core functionality.
If you separately allow AI data sharing, we use the information you submit to AI features to extract structured details from records, explain uploaded reports, and generate chat responses. We do not use health data for advertising, marketing, or insurance decisions.
We do not use your health data for advertising, profiling, or any purpose unrelated to the app's core functionality.
We use aggregated analytics to understand app usage, diagnose usability problems, and improve HealthAI. Advertising personalization and Google Signals are disabled in our Google Analytics configuration.
After you choose, the app stores that choice on your device and does not show the analytics prompt again while that choice remains saved.
AI Processing and OpenAI
HealthAI uses OpenAI, L.L.C. as a third-party AI service. Before any personal data is sent, the app shows a separate consent screen and asks you to allow or decline this sharing. Declining does not prevent you from using HealthAI as a manual health-record organizer.
For report extraction, we send OpenAI the image, PDF, CSV content, or typed health record you deliberately submit, together with instructions needed to extract the record. For AI chat, we send your prompt, any attached image, recent messages in that AI conversation, and relevant profile and saved-record context shown to the AI feature, which may include name, date of birth, gender, vitals, medicines, diagnoses, reports, prescriptions, symptoms, doctor or hospital details, and dependant information. We do not deliberately send your email address, PIN, authentication credentials, or unrelated account data to OpenAI.
OpenAI processes this information to return the extraction or response requested by you and to operate and protect its API service. OpenAI states that API data is not used to train its models unless the API customer explicitly opts in. By default, OpenAI may retain API prompts, responses, images, files, and related metadata in abuse-monitoring logs for up to 30 days, unless a different approved retention control or legal requirement applies.
You can decline initially or withdraw permission later from Profile Management. After withdrawal, HealthAI blocks new AI transmissions. Withdrawing permission does not automatically delete information previously processed by OpenAI under its applicable retention period, but deleting your HealthAI account removes the account data and stored chat history held by HealthAI.
Data Storage and Security
All data is stored securely using industry-standard encryption. We implement technical and organizational measures to protect your information from unauthorized access, loss, or disclosure. Your records are only accessible through your account.
Third-Party Services
HealthAI uses service providers for hosting, database storage, authentication, email delivery, limited app-usage analytics through Google Analytics, and—only with your explicit permission—OpenAI for AI report extraction and chat. Providers receive only the data needed to perform their contracted service and must provide privacy and security protections consistent with this policy and applicable law. We do not sell personal or health data to any third party.
Google Analytics is provided by Google LLC and is used only after you select Allow analytics. Google may process limited analytics information under its privacy terms. HealthAI disables Google Signals and advertising-personalization signals and does not intentionally configure analytics events containing health or chat content.
Your Data, Your Control
You can edit or delete records, medicines, and profiles in the app. You can withdraw AI data-sharing permission from Profile Management at any time and continue using manual record features. You may delete your account from Profile Management, which removes your account, saved health state, stored chat history, authentication records, and associated audit records from HealthAI systems, subject to any limited retention required by law, security, or an active backup cycle.
You may allow or decline Google Analytics separately from accepting these Terms and the Privacy Policy. Declining analytics does not affect your ability to create an account or use HealthAI.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of HealthAI after changes are posted constitutes your acceptance of the updated policy.
Third-party privacy information
OpenAI Privacy Policy ↗OpenAI API data controls and retention ↗Google Privacy Policy ↗
Privacy questions?
Reach out and we'll respond within 24 hours.