Privacy Policy
The short version: we collect as little as possible, we run no advertising, we sell nothing about you, and health details you send are treated as confidential.
Last updated 8 September 2026
This policy explains how AskDoc Health (“we”, “us”) handles personal information collected through https://askdoc.life. It is written to satisfy the disclosure requirements of the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA, Canada’s PIPEDA, and the platform policies of Google and other search and browser vendors.
1. What we collect, and why
| Data | When | Why (legal basis) |
|---|---|---|
| Usage data: pages visited, time on each page, the page you arrived on, referrer, approximate location (city and country from your IP), device type | As you browse | To understand what helps readers and improve the site (legitimate interest). Kept as first-party data; no advertising networks are involved. |
| Name, email, country, age, and the health details you choose to share | When you submit the request form | To answer your request and deliver the service (contract; consent for health data). |
| Documents you send: lab reports, imaging reports, summaries | Only if you send them | To perform the review you asked for (consent). |
| Billing details | If you pay an invoice | Handled by the payment provider; we see confirmation, not card numbers (contract, legal obligation). |
| Your email, a one-line result summary, and your visit path on this site | Only if you ask a tool to email you your results | To send you the result you asked for, and to understand what led up to it (consent). Unsubscribe any time. |
| Aggregate, cookie-free page counts | Always | To see which guides help people (legitimate interest). No individual profiles. |
1a. Sensors on your phone, and what never leaves it
Some tools ask your phone for a sensor. In every case the reading is used in the page, on your device, and is not transmitted to us or to anyone else.
| Sensor | Used by | What happens to it |
|---|---|---|
| Location (GPS) | The walk and run tracker, only while a session is running | Coordinates are read by the page to measure distance and draw your route. They are never sent to us, and no map tile server is contacted, which is why the route is drawn as a shape rather than a street map. Nothing is kept after you finish except the distance, time and calories you choose to save. |
| Motion (accelerometer) | The step counter in the same tracker | Used to count steps while you walk. The raw motion data is never stored or transmitted; only the step total reaches your record, and only if you save the walk. |
| Screen wake lock | Workouts and the tracker | Keeps the screen on during a session. It collects nothing. |
| Vibration, sound and the device voice | Workout and split cues | Output only. Nothing is recorded, and the microphone is never used anywhere on this site. |
Your browser will ask permission before location or motion is used, and refusing simply means that tool measures less. You can withdraw permission in your browser or phone settings at any time.
1b. Reminders
Reminders you set are stored on your device. When you add them to your calendar, the file is generated in your browser and handed to your calendar app; it does not pass through us. We never learn what you take, when you take it, or whether you took it.
2. Cookies and local storage
This site sets no advertising or cross-site tracking cookies. One third-party analytics script does run, Google Analytics, and only if you press Accept on the cookie bar. Decline, or close it without choosing, and the script is never fetched and no request reaches Google. Where it does run, it is set to measure pages only: the advertising signals Google can collect are switched off. We use browser local storage for two things: a first-party visitor identifier with your page history on this site, used only for the usage statistics described above, and any readings you save in the trackers without an account, which stay on your device. Tool answers are not sent to us unless you choose to email yourself your results or save them to your account. Also stored on your device: your movement log and streak, your reminder schedule, an unfinished walk or workout so it can be offered back, and your theme and sound preferences.
If you add the site to your home screen it installs a service worker, which keeps a copy of pages you have opened so they still work without a connection. That cache lives in your browser and is never uploaded. Pages behind your account, and anything the site sends or receives on your behalf, are deliberately excluded from it. Clearing site data in your browser removes all of the above.
2a. Optional accounts
Creating an account is optional and free; every tool works without one. If you sign in, we store your email address, the profile details you choose to fill in (such as year of birth, height, weight, conditions, medicines, and goals), and the readings you choose to save. This information is protected by row-level security: only you, signed in as you, can read it. We use it solely to show you your own history and to generate pointers for you on your account page. It is never used for advertising and never shared. You can delete any of it, or ask us to delete your whole account, at any time by emailing hello@askdoc.life.
You can also save a reading without giving an email. When you press “I agree, save this reading” under a result, we open a private record tied to this browser, note that you agreed and when, and store the reading in it, under the same protections as any other account. Nothing is stored before you press that button. Readings after that save to the same record automatically. Add an email on your account page to keep the record on any device; clearing this browser without one loses access to it.
Full detail on browser storage is in the cookie policy.
3. Health information
Health details you send are special-category data under GDPR and sensitive personal information under the CPRA. They are used only to answer your request, stored encrypted, never used for marketing, never used to train third-party AI models, and never sold or shared for advertising.
A note on HIPAA (United States): AskDoc is a health education service. It does not provide medical care, does not bill insurance, and is not a HIPAA covered entity or business associate, so the information you share here is not part of a hospital or insurance medical record. We still protect it to the stricter standards above. Questions you type to the site assistant are processed only to generate the answer you see and are not stored with your identity.
4. Who we share data with
Only the service providers needed to run the site, each seeing only what it needs: hosting and content delivery, secure database storage, email delivery, and payment processing. Each is bound by its own data processing agreement. We do not sell personal information, and we do not “share” it for cross-context behavioral advertising as the CPRA defines that term. We disclose data if a law with valid jurisdiction requires it, and we will tell you unless the law forbids it.
5. How long we keep it
Consultation records and documents are kept for as long as professional record-keeping standards require, then deleted securely. Requests that do not become a session are deleted within 12 months. You may ask for earlier deletion at any time.
6. Your rights
Wherever you live, you can email hello@askdoc.life to:
- Get a copy of what we hold about you (access, portability)
- Correct it (rectification)
- Delete it (erasure, “right to be forgotten”)
- Restrict or object to processing
- Withdraw consent at any time, without affecting past processing
We respond within 30 days. We never discriminate against you for exercising a privacy right. California residents: the rights above cover CCPA/CPRA access, deletion, correction and opt-out requests; we do not sell or share personal information, so there is nothing to opt out of. EU/UK residents: you may also complain to your data protection authority. Canadian residents: the same rights apply under PIPEDA, and you may contact the Office of the Privacy Commissioner of Canada.
7. International transfers
The site is hosted on global infrastructure and your data may be processed outside your country. Where GDPR applies, transfers rely on standard contractual clauses through our providers.
8. Security
HTTPS everywhere, encrypted storage for documents, access limited to the reviewing doctor and the minimum necessary systems. If a breach ever affects your data, we will notify you directly and promptly.
9. Children
This site is for adults. We do not knowingly collect information from anyone under 16, and the service is not offered to children. If you believe a child has sent us data, email us and we will delete it.
10. Changes
The date at the top shows the last revision. Material changes are announced on the site, not made silently.
11. Contact
AskDoc Health · hello@askdoc.life