Privacy Policy

Summary

Ask a Doctor does not require an account. Your health data stays on your device. When you ask the AI a question, your message is sent to our server and forwarded to OpenAI (GPT-4o-mini) to generate a response. We do not collect names, emails, contacts, GPS location, or microphone audio.

What stays on your device

The following data is stored only on your device using the operating system's secure storage (iOS Keychain / Android encrypted preferences). We never see it unless you explicitly enable Personal mode:

• Profile information (name, age, gender, height, weight)
• Chronic condition readings (blood pressure, glucose, etc.)
• Medications you track
• Lab results
• Daily journal entries
• Menstrual cycle data
• Chat history

What we send to our server

• Your chat messages and any image or PDF you attach
• Personal context (profile, recent tracking data) — only if Personal mode is on
• An anonymous device ID (UUID) for rate limiting
• Approximate location (country / city) derived from your IP address
• Device platform (iOS / Android), app version, language

We do not collect names, emails, phone numbers, contacts, precise GPS location, or microphone audio. The device ID is not linked to any personal identifier.

AI Provider

Chat messages, attached images, and attached PDF files are forwarded to OpenAI (model: GPT-4o-mini) to generate responses. Data is processed on OpenAI's servers in the United States.

OpenAI's API does not use your data to train its models, per OpenAI's API Data Usage Policy. OpenAI may retain API request data for up to 30 days for abuse monitoring, after which it is deleted.

If you are located in Turkey or the European Union, please note that this constitutes a transfer of data outside Turkey / the EEA. By using the app, you consent to this transfer.

Data retention on our server

Your chat messages are processed in real time and not permanently stored on our server. Anonymous request logs (containing device ID, timestamp, request size, and HTTP status — but not message content) are retained for up to 30 days for abuse prevention and service quality, after which they are automatically deleted.

International data transfers

Our server is operated in Turkey. Chat content is forwarded to OpenAI in the United States. Both transfers are encrypted in transit (HTTPS/TLS 1.2+).

Advertising

The app shows ads via Google AdMob. AdMob may collect advertising identifiers (IDFA on iOS, AAID on Android) per Google's Privacy Policy. On iOS, the App Tracking Transparency prompt asks for your consent. You can limit ad tracking in your device settings at any time.

Third-party services & SDKs

• OpenAI API — generates AI responses (United States)
• Google AdMob — displays ads (Google's data centers)
• Capacitor plugins (camera, local notifications, preferences, browser, status bar, haptics, device info, keyboard) — run on-device only, no network access

Children

The app is intended for users 17 and older. We do not knowingly collect data from children under 17. If you are a parent or guardian and believe your child has used the app, contact us and we will assist with data removal.

Your rights

You can:

• Delete any conversation from within the app at any time
• Delete all on-device data via the Data Management screen
• Disable Personal mode to stop sharing health context with AI
• Limit ad tracking via your device's privacy settings
• Request deletion of any server-side request logs linked to your device — contact us with your device ID (visible in the app's About / Data screen)

If you are in the EU or Turkey, you also have the right to access, rectify, or object to processing under GDPR / KVKK. Contact us to exercise these rights.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last Updated" date below and, where appropriate, communicated within the app.

Contact

Developer: Tugba Celik
Email: support@dryazilim.com