Privacy Policy

This Privacy Policy explains what personal and health information HealthMate AI (a product of PixelDock Apps, operated by Harsh Makhija (Sole Proprietor), Delhi, India) collects through the HealthMate AI mobile app, how it's used, and the choices you have.

HealthMate AI handles sensitive health information. Section 1 below lists everything the app currently collects; which of it applies to you depends on which features you actually use — logging a medicine, a vital, a health profile field, an uploaded document, or a family member is always your choice.

1. Information we collect

• Account information — your phone number (for OTP sign-in) or Google account details if you sign in with Google.
• Health profile — date of birth, sex, height, weight, blood group, allergies, and chronic conditions you choose to add.
• Medicines and adherence — medicine names, dosages, schedules, and every "taken / missed / skipped" log.
• Vitals — any blood pressure, blood sugar, heart rate, weight, sleep, water, mood, or exercise entries you log.
• Appointments — doctor/clinic name, specialty, date/time, and location you add.
• Medical documents — a photo you take, choose from your library, or a PDF you select (e.g. a prescription or lab report), if you use the camera/photo-library/file permission to upload one. Stored in a private file, never a public link — see Section 9.
• Emergency profile — blood group, allergies, a free-text note, and emergency contacts (name, phone, relation) you choose to add for the SOS feature described in Section 4.
• Family and caregiver data — the name and relation you give a family member profile you create, and the caregiver/viewer access you grant others via a share code.
• AI chat messages — questions you ask the AI Medicine Assistant, and the daily/weekly reports generated for you.
• Device and push data — a push notification token, so reminders and family miss-alerts can reach your device.
• Subscription status — your plan and billing status from Google Play Billing. We never see your card or bank details — Google handles payment directly.

2. How we use your information

To schedule and deliver your medicine and vitals reminders, to compute your adherence streaks and health trends, to generate the AI daily/weekly summaries described in Section 3, to notify a linked caregiver if a dose is missed, and to run your subscription. We do not use your health data for advertising, and we do not sell it.

3. AI processing — informational only

HealthMate AI's AI features (medicine Q&A, daily summaries, weekly reports) are built on Anthropic's Claude models. Adherence percentages, streaks, and vitals trends are calculated on your device or our server first — the AI only phrases those already-computed numbers into plain language; it does not invent figures. The AI is informational only: it does not diagnose conditions, prescribe medication, or change a dose, and every AI answer carries a reminder to consult a qualified healthcare professional. If a chat message describes a possible emergency, the AI is instructed to tell you to seek emergency help immediately (dial 112 in India) rather than offer advice.

4. Emergency SOS

The SOS button opens your device's own share sheet (or, for a specific contact, your phone's call or messaging app) pre-filled with your blood group, allergies, conditions, current medicines, and any note you've added. You choose where it goes — SMS, WhatsApp, a phone call, or any other app on your device. This uses your device's built-in sharing, not a HealthMate server: we don't see, log, or store what you share or with whom, and no location data is collected or sent — the app does not access your device's location.

5. Who we share it with (sub-processors)

We do not sell your personal or health information. Some of these providers, including Anthropic and Google, may process data outside India, including in the United States.

6. Family sharing and caregivers

If you invite a caregiver using a share code, they can see the health data you grant access to for that family member — medicines, adherence, and vitals — according to the role you assign (caregiver or viewer). You can revoke access at any time. If you add a family member yourself (e.g. a parent or child), you are responsible for having the right to manage their information on HealthMate AI; for a child's profile, this should be done by a parent or legal guardian.

7. Data retention and deletion

We keep your account and health data while your account is active. To delete your account and associated health data, email contact@pixeldockapps.com with the subject "Delete my HealthMate account." We will delete your health profile, medicines, vitals, appointments, emergency profile, uploaded documents, AI chat history, and family data within 30 days of a verified request. Some records — such as transaction records required for tax purposes — are retained longer where the law requires it. This is currently a manual process rather than an in-app "delete account" button.

8. Your rights

You can ask us for a copy of your personal and health information, ask us to correct it, or ask us to delete it, by emailing contact@pixeldockapps.com. We aim to respond within 30 days.

If you are in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to access a summary of your personal data and its processing, the right to correction and erasure, and the right to grievance redressal, by emailing the address above.

If you are in the European Economic Area or UK, you additionally have rights under the GDPR/UK GDPR to access, rectify, erase, restrict, object to, or port your data. The lawful bases we rely on are performance of a contract (delivering the reminders and reports you signed up for), your consent (for sharing data with a caregiver, or optional features), and legitimate interests (fraud prevention, service reliability).

9. Security

Health data is stored in Supabase with row-level security, so an account can only read data for members it owns or has been granted access to. Uploaded documents are kept in a private storage bucket with the same access rule — never a public URL — and the app only ever generates short-lived (10-minute) signed links to view one. Connections use HTTPS/TLS. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Data breach notification

If we become aware of a data breach that poses a risk to your rights or freedoms, we will notify affected users and, where legally required, the relevant regulator, without undue delay.

11. Children's data

HealthMate AI accounts are for adults (18+). A parent or guardian may add a child as a managed family member under their own account — HealthMate AI does not allow a child to create their own account or sign in directly.

12. Changes to this policy

We may update this policy as HealthMate AI's features change; we'll update the "last updated" date when we do.

13. Contact

contact@pixeldockapps.com or see our Contact page. HealthMate AI is a product of PixelDock Apps — see the main PixelDock Apps Privacy Policy for how the pixeldockapps.com website itself (outside the app) handles data.