Privacy Policy

We collect the information you give us directly, and a limited amount of information generated as you use the platform:

• Account details — name, email, phone number, password (stored as a bcrypt hash, never in plain text).
• Health information — symptoms you describe, diagnosis results, medications, appointments, and any health records or lab results you choose to upload.
• Usage data — pages visited and actions taken within the app, used for security auditing and improving the product.

We do not collect more than the platform needs to function. If a feature doesn't need a piece of information, we don't ask for it.

• To provide the core service — symptom analysis, appointment booking, medication reminders, and health record storage.
• To send transactional emails you'd expect — email verification, appointment confirmations, password resets.
• To secure your account — audit logging, rate limiting, and abuse detection.
• We do not sell your data. We do not share your health information with advertisers.

• Encryption at rest — sensitive health record fields are encrypted with AES-256-GCM before they touch the database.
• Encryption in transit — all traffic to the platform is served over HTTPS/TLS.
• Role-based access control — a permission system governs exactly what each account type (patient, provider, admin) can see and do; access to patient data outside your own care relationships is restricted by role.
• Authentication — passwords are hashed, sessions use signed JWTs with expiry and refresh rotation, and email verification is required before an account can sign in.
• Audit logging — administrative access to platform data is logged.

When you use the symptom checker or AI health assistant, the symptoms and health details you enter are sent to our AI provider to generate a response. This data is used only to produce your result and is not used to train third-party models. AI-generated guidance is informational — it is not a diagnosis, and it does not replace a consultation with a qualified healthcare professional.

• You can review and update your profile information at any time from Settings.
• You can delete individual health records, medications, and appointments yourself from within the app.
• To request full account deletion or a copy of your data, email — we'll act on the request as quickly as we reasonably can.

We retain account and health data for as long as your account is active, so the platform can keep working the way you expect (showing your medication history, past appointments, and diagnosis history). If you delete your account, we remove your personal data within a reasonable operational window, except where we're required to retain records for legal or security purposes.

As RogSeva evolves, this policy may be updated to reflect new features or practices. We'll update the "last updated" date below when that happens. Material changes will be communicated in-app.