Privacy by design
Lawful basis
We process health data on the basis of your explicit consent (GDPR Art. 9(2)(a)), given at registration and withdrawable at any time from your dashboard.
What we store
Your name, contact details, preferred language, a pseudonymised health ID, your appointments and the consultation notes written by your doctor. Nothing else.
Who can see it
Access is enforced in the database itself: a patient record is readable only by that patient and by the doctor they booked. Volunteer doctors never see records of patients they are not treating.
Your rights
You may request access, rectification, erasure, restriction, portability and objection (GDPR Art. 15-21). Both access and erasure are self-service: use Account & data below to download everything we hold about you, or to delete your account permanently.
Retention
Consultation records are kept only as long as needed for continuity of care, then deleted. We never sell data or use it for advertising or model training.