Privacy policy

Data controller

HI DOCTOR AI SL: hello@hi-doctor.ai. We process your data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

Data Protection Officer

You can reach our Data Protection Officer (DPO) at dpo@hi-doctor.ai for any question about how we process your personal or health data.

What data we process

• Identification data: name, email, phone number.
• Health data provided in the questionnaire.
• Payment data (processed by our certified payment provider).

Purpose

• Delivering the medical consultation and issuing a prescription where appropriate.
• Operational communications (email, the platform's private chat).
• Commercial emails about our service; you can unsubscribe in every email.
• Meeting legal obligations.

Legal basis

Explicit consent (art. 6.1.a GDPR), performance of the contract (6.1.b) and compliance with a legal obligation (6.1.c). For health data, art. 9.2.h GDPR: processing by healthcare professionals.

Retention

We retain clinical records and signed prescriptions for the periods required by Spanish health law, and payment records for the periods required by tax law. Records kept to meet these obligations have restricted access. Other personal data is deleted or anonymised when the account is deleted.

Recipients

Your data is not shared with third parties for commercial purposes. Our data processors (EU hosting, email delivery, PCI DSS-certified payment provider) sign GDPR-compliant processor agreements under art. 28 GDPR.

International transfers

By default, your data is hosted on servers located within the European Union. If a processor outside the EEA is exceptionally used, the appropriate safeguards under Chapter V GDPR apply (EU-approved Standard Contractual Clauses).

Security measures

We implement the technical and organisational measures required by art. 32 GDPR: encryption in transit and at rest, role-based access control, audit logging, encrypted backups, ongoing staff training, and incident-response procedures.

Mobile app

If you enable notifications, we process your push token through the Expo push service, Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM). Notifications tell you that an update is available; their payloads contain no health data. Optional push notifications rely on your consent (Article 6(1)(a) GDPR). Device data, including platform, app version and locale, supports delivery and operation of the service under our contract with you (Article 6(1)(b)). We retain tokens and associated device data until sign-out, device removal or account deletion. You can turn notifications off in your device settings.

Sign in with Apple and Sign in with Google provide a provider identifier, email address and, when available, your name so we can authenticate you and connect you to your account. Apple may supply a private relay email address instead of your personal address. To unlink, remove Hi Doctor from the connected apps in your Apple or Google account settings and contact hello@hi-doctor.ai to remove the link in Hi Doctor. Arrange another way to sign in before unlinking. Unlinking does not delete your Hi Doctor account.

We use Sentry to help find and fix app crashes and errors. Diagnostics may be sent before you sign in. Reports include app version and build, error type and stack information; they may also include operating system details, device model and screen names. We remove error-message text, account and installation identifiers, credentials and request content before sending reports. We do not send automatic session records, screenshots or recordings. Diagnostics are kept for 90 days.

To request deletion in the app, open Settings → Account → Delete account. You can also use our public web deletion page after uninstalling the app, or email hello@hi-doctor.ai from your account email address. Clinical records and prescriptions are retained for the periods required by Spanish health law; payment records are retained as required by tax law. Required prescribing and audit attribution is kept with restricted access, including for doctors and staff. Other personal data is deleted or anonymised.

Request account deletion

Your rights

• Access, rectification, erasure, objection, restriction, portability.
• Withdrawing your consent at any time.
• Filing a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

Exercise your rights by writing to hello@hi-doctor.ai. We reply within 30 days at the latest.