Privacy policy

The controller of the patient's data is the doctor the patient turned to: it is the doctor who decides why it is collected. We act as the processor — we provide the tool and store the data on the doctor's instructions.

Service operator: ФОП Каспер Станіслав Богданович.

The doctor's data: name, email, phone, the content of the public page, appointment settings, the history of subscription payments.

The patient's data: name and one contact (email, phone or Telegram), answers to the intake test, lab files if the patient attached them, appointment records and the doctor's notes.

Technical data: anonymous events of page views and test completions. They contain no names or contacts.

• The patient gives explicit consent before leaving any data. Without consent no request is created.
• Every consent is recorded separately: the date, the version of the consent text and a hash of the IP address.
• Consent can be withdrawn — contact your doctor or write to us.

• Names, contacts, free-text answers, the doctor's notes and lab files are stored encrypted. The database holds ciphertext, not the text itself.
• IP addresses are not stored in the clear — only an irreversible hash.
• Every time a doctor opens a patient card it is written to the log. The log contains no medical data itself.
• Access is limited: a doctor sees only their own patients. This is enforced in the code, not in the interface.
• Data is transferred only over a secure connection (HTTPS).

• The database — in a European region (Frankfurt).
• Lab files — in private storage in a European region (Frankfurt), encrypted.
• Emails to patients are sent through a provider that processes them in the European Union (Ireland).

We involve contractors only where the service would not work without them:

• Hosting and the database — to run the service.
• The email provider — to send messages to patients and doctors.
• The AI model provider — to analyse lab results. Only medical facts are sent in the request, without the patient's name or contacts.
• The payment service — to pay for the subscription. Card details are processed by it; we neither see nor store them.

We pass no data to advertising networks and place no advertising pixels on public pages: a person's medical concern has no business inside advertising systems.

• Patient data — for as long as the doctor keeps their card, or until a deletion request arrives.
• After the subscription ends, the cabinet's data is kept for 90 days and then deleted.
• The access log is kept longer than the data itself, because that is exactly what it exists for — controlling access.

• To find out what data about you is stored.
• To correct inaccurate data.
• To delete data or withdraw consent.
• To receive a copy of your data.

For a patient it is easier to contact their doctor — they see the card and can change or delete it. If that is not possible, write to us at [email protected]. We reply within 30 days.

We use only technical cookies: they keep the doctor's session in the cabinet, remember small interface settings (the chosen language among them) and record which source a person first arrived from. There are no advertising or tracking cookies.