Privacy Policy

BeDoctor is operated by Strataline Private Limited, registered at Building No. 68/2045B, Bilathikulam, Nadakavu, Kozhikode, Kerala, 673011. Under India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the information described here — meaning we decide what is collected and why, and we are accountable for it.

Account details. Your first name, and either an email address or a mobile number depending on how you signed up. Accounts created with email may also have a last name. We do not ask for both an email and a phone number.

Health profile, if you fill it in. Gender, date of birth, height, weight and blood group; lifestyle answers covering smoking, alcohol, physical activity and diet; and medical history covering existing conditions, allergies, past surgeries and medications you take. All of it is optional — the app works without it, and it exists to make the guidance more specific to you.

Symptom checks. The symptoms you enter, your answers to the follow-up questions, and the results produced for you.

Medications and doses. Medicine names, schedules, quantities, and whether you marked each dose taken or skipped.

Lab reports, if you upload one. The image or PDF you upload and the explanation generated from it. The file itself is deleted as soon as it has been read — see retention below.

Technical information. Your device's time zone, so dose reminders fire at the right local time; and your IP address, used only to limit how many free checks can be run from one network before signing up. Error reports are also collected when something goes wrong — see section 5.

We do not collect contacts, advertising identifiers, or browsing activity on other sites, and there is no advertising in BeDoctor. We do use Vercel Web Analytics and Speed Insights to see which pages are visited and how fast they load, in aggregate. Neither sets a cookie or stores anything to identify you across visits, and neither has any way to see what you type into the app — symptoms, health profile fields and lab reports are sent directly to our own API, never through this.

• To run symptom checks and produce the guidance you asked for.
• To send medication reminders at the correct local time.
• To keep a history you can look back at — past checks, dose adherence, previous lab report explanations.
• To sign you in and keep your account secure.
• To arrange a counsellor callback, if you request one.
• To find and fix faults, and to limit abuse of the free preview.

We do not sell your data, and we do not use it to train AI models.

BeDoctor's guidance is generated by third-party AI models. To produce it, the symptoms you enter, your answers, and the relevant parts of your health profile are sent to those providers as part of the request. Lab report images are sent in the same way to be read.

We send only what a given request needs, and never your name, email address or phone number. The providers process the request and return a result; under their API terms they do not use this content to train their models.

The models used are OpenAI's GPT-4o mini and Google's Gemini 2.5 Flash. Which one handles a request depends on the language and the feature — Malayalam and lab report reading go to Gemini.

We use the following sub-processors. Each is bound by its own terms and processes data only to provide the service described.

Your account and health data are stored in India, in AWS's Mumbai region. Two exceptions leave the country: requests to the AI providers in section 4, and error reports to Sentry, whose servers are in the European Union and which receive no health data or contact details.

You can delete your account from the app — Profile, then Delete Account — or from bedoctor.in/delete-account, which also works if you have already uninstalled it.

Deletion is immediate and permanent from your side: your sign-in is destroyed straight away and cannot be restored, and your records are erased within 30 days. We hold them for that period for security and fraud purposes only. It cannot be undone.

Under the DPDP Act you may:

• Ask what data we hold about you, and get a copy of it.
• Have inaccurate data corrected — most of it you can edit directly in the app.
• Have your data erased, by deleting your account as described above.
• Withdraw consent for optional processing. The health profile is optional; withdrawing means removing it, after which guidance will be less specific.
• Nominate someone to exercise these rights if you are unable to.
• Complain to the Data Protection Board of India if we do not resolve a grievance.

To exercise any of these, email hello@bedoctor.in. We may ask a question to confirm the account is yours before acting — erasing health records on an unverified request would be its own harm.

BeDoctor is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.

Data is encrypted in transit and at rest. Sign-in is handled by AWS Cognito, and we never see or store your password. Access to production data is limited to those who need it to operate the service.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data we will notify you and the Data Protection Board as required.

If this policy changes materially we will update the date at the top and, where the change affects how your data is used, ask you to review it again in the app.

For anything about your data, or to raise a grievance, contact our Grievance Officer Akshay Sunil at hello@bedoctor.in, or write to Strataline Private Limited, Building No. 68/2045B, Bilathikulam, Nadakavu, Kozhikode, Kerala, 673011. We aim to respond within 30 days.