Privacy policy
Last updated 1 September 2026. The plain-language version is on the privacy page.
1. What we collect
Account data. Your email address, a bcrypt hash of your password, and the names of the profiles you create.
Health data. The documents you upload, the values extracted from them and confirmed by you, and anything you record about appointments, medications and allergies. This is sensitive personal data and is treated as such throughout.
Operational data. Server logs containing IP address, timestamp and the endpoint called, kept so that abuse can be identified and failures diagnosed. Rate-limiting records keyed to an IP address. We do not run third-party analytics or advertising trackers on the app.
2. Why we hold it
To provide the service you asked for: storing your documents, extracting values for your confirmation, showing them back to you, and producing the exports you request. Account data exists so that you can sign in and so that records can be scoped to you. Operational data exists to keep the service running and secure.
We do not process your health data for any purpose you have not asked for. We do not profile you, and we take no automated decision that produces a legal or similarly significant effect.
3. Who it is shared with
An AI provider receives the pages of a report in order to read them, and returns the extracted values. The provider is contractually prohibited from retaining that content or using it to train models.
Our hosting provider operates the servers on which the service runs.
Nobody else. We do not sell personal data, do not share it with insurers, employers, pharmaceutical companies, advertisers or data brokers, and do not disclose it in aggregate or de-identified form. We would disclose data if compelled by a valid court order, and would tell you unless prohibited from doing so.
4. Where it is stored
On servers we control, with encrypted disks. Data in transit is protected with TLS. Documents are stored separately from the database that references them. Sending a report to the AI provider for reading may involve a transfer outside Pakistan.
5. How long it is kept
Health records and documents are kept until you delete them or close your account — the point of the product is that they do not expire. Operational logs are kept for 90 days. Rate-limiting records are kept for 2 days.
After account deletion, records are removed from live systems immediately and age out of encrypted backups within 30 days.
6. Your rights over it
You can read everything we hold about you through the app, export all of it at any time in both a readable and a machine-readable form, correct any value, and delete individual records or the entire account. These are built into the product rather than being requests you have to make of us; where you would rather ask a person, write to support@sehatreport.app.
7. Children
Accounts are for adults. A parent or guardian may keep a child’s records as a profile under their own account.
8. Security incidents
If personal data is exposed in a way likely to affect you, we will tell affected users directly and describe what happened, what was exposed, and what we have done about it.
9. Changes to this policy
Material changes will be notified before they take effect. The date at the top of this page records the last revision.
10. Contact
Questions about this policy, or about your data, go to support@sehatreport.app. The privacy page says the same things without the formality.