Privacy Policy

AponSathi ("we," "our," or "the app") is a digital companion portal designed to help users manage health records, stay informed through news, track important document deadlines, and access basic tech support. This policy explains what information we collect, how it is used, and how it is protected.

1. Information we collect

Account information: When you create an account, we collect your name, email address, and a securely hashed password. If you provide a phone number for reminder notifications, we collect and store that as well.

Health information you choose to share: If you use the Health Record feature, we collect information you enter, including:

• Symptoms or illnesses you log, with date and time
• Medications and prescriptions, including dosage and schedule
• Health measurements such as blood pressure or temperature
• Photographs or scans of prescriptions you choose to upload

Usage information: We may collect basic technical information such as device type, browser type, and general usage patterns to help us maintain and improve the app.

2. Where your health data is stored

Unlike many health apps, AponSathi does not store your health records on our own servers. Instead, when you connect your Google account, your symptom logs, medication records, vitals, and uploaded prescription files are stored directly in your own Google Drive, in a folder created for your account. This means:

• You retain ownership and control of your own health data at all times.
• You can revoke AponSathi's access to your Google Drive at any time through your Google Account settings, which immediately stops our ability to read or write to that folder.
• We do not maintain a separate central database of your health records.

Your account credentials (login information) and app settings are stored separately in our authentication system, which is kept isolated from your health data.

3. How we use your information

We use the information you provide to:

• Let you log in securely and access only your own data
• Store and retrieve your health records from your own Google Drive on your behalf
• Generate summaries of your medical history for your own use, such as sharing with a doctor
• Read and extract information from prescription images you upload, so you don't have to type it manually
• Send you reminders (via WhatsApp, if you provide a phone number) about medications or care instructions you've logged
• Improve and maintain the app

4. Third-party services we use

To provide AponSathi's features, we work with the following third-party services, each of which processes limited information necessary for its function:

• Supabase: manages account authentication and stores your account profile information.
• Google (Drive and Sheets APIs): stores your health records in your own Google Drive, with your explicit permission granted through Google's own consent process.
• Anthropic (Claude API): processes prescription images and health record text you submit, in order to extract structured information (such as medication names and dosages) and to generate medical history summaries at your request. Anthropic does not have standing access to your Google Drive; information is sent to it only at the moment you request an extraction or summary.
• Meta (WhatsApp Business Platform): used to deliver reminder messages to the phone number you provide, if you opt in to WhatsApp reminders.

We do not sell your personal or health information to any third party, and we do not use your health data for advertising purposes.

5. Your rights and choices

You can:

• Access, edit, or delete any health record you've entered, directly within the app
• Revoke AponSathi's access to your Google Drive at any time via your Google Account's third-party access settings
• Opt out of WhatsApp reminders at any time
• Request deletion of your AponSathi account and associated profile information by contacting us at saubhik.chaudhuri@gmail.com

Deleting your AponSathi account does not automatically delete files already stored in your Google Drive, since those files belong to you; you can delete them directly from your Drive at any time.

6. Data security

We use industry-standard measures to protect your information, including encrypted storage of sensitive credentials and access tokens, and access controls that ensure your data is visible only to you. However, no system can guarantee absolute security, and we encourage you to use a strong, unique password for your account.

7. Children's privacy

AponSathi is not directed at children, and we do not knowingly collect information from individuals under the age of 18.

8. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice within the app or via email.

9. Contact us

If you have questions about this privacy policy or how your information is handled, please contact us at saubhik.chaudhuri@gmail.com.

This document is a starting draft intended to satisfy initial platform requirements (such as Google OAuth consent screen configuration) during development. Given that AponSathi handles health-related data, we recommend having this policy reviewed by a qualified lawyer familiar with applicable data protection regulations in the regions where your users are located, before real users begin entering personal health information.