Privacy policy
The short version
- Your health records are stored in your own Doctine account. Other users can't see them.
- When you ask the assistant a question or scan a document, that content is sent to our AI provider to produce the answer. It isn't used to train their models by default.
- We don't sell your data, show ads or use tracking cookies.
- You can export your data or delete your account and everything in it at any time, in Settings.
Who we are
Doctine is a personal health records app and AI health assistant, operated by Doctine Private Limited, India ("Doctine", "we", "us"). We decide how and why your personal data is processed. Under India's Digital Personal Data Protection Act, 2023, that makes us the Data Fiduciary.
Contact us about privacy, including complaints, at support@doctine.com.
What this policy covers
This policy covers the Doctine app at app.doctine.com, this website, and the app preview on it. The preview uses made-up sample data. It doesn't create an account, and nothing you type into it is saved or sent to a server.
What we collect, and why
| What | Why we need it |
|---|---|
| Account details: your name and email address. A password if you sign up with email; it's stored only as a secure hash, which we can't read. If you use "Continue with Google": the name, email address and profile picture Google shares. | To create your account, sign you in, and send account emails such as confirming your address or resetting your password. |
| Health profile: the details you choose to enter, such as date of birth, height, weight, blood group and allergies. | To show your profile and, if you choose, to give the assistant context for your questions. |
| Documents you add: photos and files of prescriptions, lab reports and other records, and the details read from them, such as test values, medicine names and dates. | To store and organise your records, name them automatically, and let you search them. |
| Medicines and doses: the medicines, schedules and dose history you record. | To show your medicines and remind you when a dose is due. |
| Chats with the assistant: what you ask and the replies. | To answer you. Chats are saved to your account only if you switch on "Save my chats". |
| Your choices: which permissions you have given or withdrawn, and when. | To respect your choices and show that we did. |
| Technical data: your IP address and account identifier, converted into a one-way code before they're counted, plus standard server logs kept by our hosting providers. | To keep the service secure and working, and to stop abuse, for example by limiting how many requests one person can make. |
Health information is sensitive. You decide what to add, and you don't have to add anything you aren't comfortable with. If you add records about someone else, make sure you have their permission, or that you're their parent or legal guardian.
Your consent
We process your data based on the consent you give when you create your account. That includes storing your records in your account and sending what you ask about to our AI provider. You can change your choices any time in Settings:
- Allow AI explanations in chat: turning it off stops anything being sent to the AI provider. The assistant then can't answer.
- Use my saved reports and profile (a box in each chat, off by default): when ticked, only the matching report values, your age and your allergies go with that message.
- Save my chats: off unless you turn it on.
Withdrawing consent doesn't affect processing that happened before. To withdraw it completely, delete your account (see "Your rights").
The AI assistant
To answer your questions and read documents you scan, we send that content to Anthropic, the company that makes the Claude AI models, through our server. Under Anthropic's terms for business customers, this content is not used to train their models by default. It's deleted from their systems within 30 days, except where it's flagged for breaking their usage rules, or where the law requires it to be kept.
The assistant gives general health information. It can be wrong, and it doesn't diagnose or replace your doctor.
Who processes your data for us
We use these service providers to run Doctine. They may process your data only to provide their service to us.
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, file storage and sign-in. Your account, records and documents live here. | Mumbai, India |
| Cloudflare | Hosts the website and app, and runs our server code. Your requests pass through it. | Global network, including the United States |
| Anthropic | The AI that answers questions and reads scanned documents. | United States |
| "Continue with Google" sign-in, if you choose it, and email for messages you send us. | Global |
This means some of your data is processed outside India. We do this only as allowed under Indian law. We never sell your personal data or share it for advertising.
We may disclose data if the law requires it, for example in response to a valid order from a court or government authority, or to protect someone's life in an emergency.
How we protect your data
- Your data is encrypted while it travels between your device and our services (HTTPS), and the database and file storage are encrypted at rest.
- The database itself refuses to show anyone's records to another account, and document files are kept in a private storage area inside your own folder.
- Keys that give wider access are kept on our server only, never in the app, and access is limited to what's needed.
No system is perfectly secure. If a breach affects your personal data, we'll tell you and the Data Protection Board of India as the law requires.
How long we keep it
We keep your data while you have an account. When you delete your account, we delete your records, documents, medicines, saved chats and your record of choices from our live systems straight away. Copies in our providers' backups and logs are removed in line with their normal schedules. We may keep limited logs for longer where the law requires it.
Your rights
You can:
- See and get a copy of your data: Settings → Export my data.
- Correct it by editing your profile, records and medicines in the app.
- Delete your account and all its data: Settings → Delete my account and data. This can't be undone.
- Withdraw consent using the switches in Settings, or by deleting your account.
- Nominate someone to exercise these rights for you if you die or can't do so yourself. Email us to arrange this.
- Complain to us at support@doctine.com. We'll reply as soon as we can, and within 90 days at most. If you aren't satisfied, you can complain to the Data Protection Board of India.
Children
You must be 18 or older to create a Doctine account. A parent or legal guardian may keep a child's health records in their own account.
Cookies and browser storage
We don't use advertising or tracking cookies, and we don't collect analytics. The app stores a small amount in your browser so that you stay signed in and your settings, such as dark mode, are remembered. The website loads its fonts from Google Fonts, which sees your IP address when it sends them.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how we use your data in an important way, we'll tell you in the app before it applies.
In a medical emergency, call 112. For mental-health support, call Tele-MANAS on 14416.