Privacy Policy

1. Introduction

Welcome to Diagnoze ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). Diagnoze is a health monitoring and AI-powered medical assistance platform designed to help users track their health metrics and receive personalized health insights.

2. Information We Collect

2.1 Personal Information

• Account Information: Name, email address, phone number, date of birth, gender
• Profile Information: Height, weight, blood group, medical conditions (diabetes, hypertension, chronic kidney disease, thyroid disorders)
• Authentication Data: Phone number for OTP verification, session tokens

2.2 Health Information

• Vital Signs: Blood pressure, heart rate, blood glucose levels, BMI measurements, sleep data
• Medical Records: Documents, test results, medical images you upload
• Health Assessments: Symptom checker responses, health assessment questionnaires
• Family Health Data: Health information for family members you add to your account

2.3 Usage Information

• App Usage: Features accessed, time spent, interaction patterns
• AI Chat Data: Conversations with our AI assistant "Liva"
• Expert Chat Data: Communications with healthcare professionals

2.4 Payment Information

• Subscription Data: Plan type, payment history, billing information
• Payment Processing: We use Razorpay for payment processing. Payment card details are handled securely by Razorpay and not stored on our servers

3. How We Use Your Information

3.1 Primary Purposes

• Health Monitoring: Track and analyze your health metrics and trends
• AI Services: Provide personalized health insights through our AI assistant
• Medical Assistance: Connect you with healthcare professionals for consultations
• Family Health Management: Enable health tracking for family members

3.2 Service Operations

• Account Management: Create and maintain your user account
• Authentication: Verify your identity and secure your account
• Customer Support: Respond to your inquiries and provide assistance
• Service Improvement: Analyze usage patterns to enhance our features

3.3 Communication

• Marketing Communications: Send promotional content (with your consent)

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal or health information to third parties for commercial purposes.

4.2 Authorized Sharing

• Healthcare Professionals: With your explicit consent, we may share relevant health data with medical experts for consultations
• Family Members: Health data is shared only with family members you explicitly add to your account
• Emergency Contacts: In medical emergencies, we may share critical health information with designated emergency contacts

4.3 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

5. Data Security

5.1 Security Measures

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Strict access controls limit who can view your information
• Secure Authentication: Multi-factor authentication and secure session management
• Regular Audits: Regular security assessments and vulnerability testing

5.2 Health Data Protection

• HIPAA-Level Security: We implement healthcare-grade security measures
• Data Minimization: We collect only necessary information for service provision
• Secure Transmission: All health data transmission uses industry-standard encryption

6. Your Rights and Choices

6.1 Access and Control

• Data Access: Request a copy of your personal and health information (through contact details as given below)
• Data Correction: Update or correct inaccurate information
• Data Deletion: Request deletion of your account and associated data

7. Data Retention

• Active Accounts: We retain your data while your account is active
• Inactive Accounts: Data may be retained for up to 3 years after account deactivation
• Legal Requirements: Some data may be retained longer to comply with legal obligations
• Health Records: Medical records may be retained for up to 7 years as per healthcare regulations

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Third-Party Services

9.1 Integrated Services

• Google Gemini API: For AI-powered health insights
• Razorpay: For payment processing
• Cloud Storage Providers: For secure data storage
• Health Services: We use Eka Care for symptom assessment and ABHA data view and create features

9.2 Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Sending an email notification
• Displaying a prominent notice in the app

11. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

12. Compliance

This Privacy Policy complies with:

• Information Technology Act, 2000 (India)
• Personal Data Protection Bill (India)
• General Data Protection Regulation (GDPR) principles
• Healthcare data protection standards