GDPR Compliance

Last updated 8 September 2026

How AskDoc Health handles personal data for visitors in the European Union and beyond. Written to be read, not just filed.

Who is responsible

AskDoc Health operates askdoc.life and acts as the data controller for personal data collected on this site. For any data request or question, write to hello@askdoc.life. We respond to data rights requests within 30 days.

What we collect, and why

Identity data (name, email) when you submit a form, sign in, or ask a question: used only to answer you and provide the service you asked for. Health information you choose to share in a request, a chat, a saved reading or a photo review: used only to provide that review or feature, seen only by the reviewing doctor and our small team. Technical data (IP address, device type, pages visited): used for security and to understand how the site is used. We run no advertising, sell no data, and share nothing with marketers.

Sensor data is a deliberate exception to all of the above: it is not collected at all. Where a tool asks your phone for location or motion, the reading is used inside the page on your device and is never transmitted to us or to any third party. There is therefore no sensor data for us to hold, export or erase. The same is true of reminders, of the movement log behind your streak, and of the offline cache created if you add the site to your home screen: all of it lives in your browser, and clearing site data removes it. The privacy policy sets out each sensor and what it is used for.

Lawful basis

We process data on the basis of your consent (forms you choose to submit), contractual necessity (delivering a service you requested), legal obligations where they apply, and legitimate interest limited to security and improving the site.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it entirely, restrict or object to processing, ask for your data in a portable format, and withdraw any consent at any time. One email to hello@askdoc.life exercises any of these; deletion requests are honored fully, including saved readings and submitted photos.

Retention

We keep personal data only as long as needed to provide the service and meet legal duties, then delete or anonymize it. Account data lives until you delete your account or ask us to.

Where data lives, and who processes it

This site runs on established cloud providers: one for hosting and security, one for the database and sign-in, and one for email delivery. Each processes data under its own GDPR commitments including standard contractual clauses for transfers outside the EU, and the full list of processors is available on request at hello@askdoc.life. Product links to Amazon involve no transfer of your personal data from us to them.

Security

HTTPS everywhere, encrypted storage, row-level access controls on the database, and access limited to the reviewing doctor and our small team. If a breach ever affects your data, we notify you as GDPR requires.

Complaints

EU visitors can complain to the data protection authority in their country at any time. We would rather hear from you first at hello@askdoc.life and fix the problem.

This page works together with our privacy policy and cookie policy. If we change it, the change appears here.