Legal
Privacy Policy
Last updated: September 13, 2026 — Version 2026-09-13. Doc in the Bot recognizes that health-related information can be highly sensitive. This policy explains how we collect, use, disclose, retain, and protect personal information when you use Doc in the Bot.
Information you provide
Depending on the features you use, we may collect:
- Name and account information
- Email address
- Questions and conversations
- Laboratory results
- Symptoms or health information you choose to provide
- Medication information
- Medical documents you upload
- Other files or information you voluntarily submit
- Communications with support
- Feedback
Some information you provide may constitute sensitive personal or consumer health information under applicable law.
Information collected automatically
When you use the Service, we may automatically receive certain technical information, potentially including:
- IP address
- Device and browser information
- Operating system
- General usage information
- Security and authentication events
- Error and diagnostic information
The exact information collected depends on the technologies used to operate the Service.
How we use information
We may use information to provide requested services; generate and display AI responses; maintain accounts and permitted conversation history; process uploaded information; secure the Service; prevent fraud and abuse; troubleshoot problems; provide customer support; maintain and improve functionality; comply with legal obligations; and enforce our policies.
Health information
We recognize that information concerning symptoms, diagnoses, medications, laboratory results, medical records, and health questions can be particularly sensitive.
We do not sell individual health information to pharmaceutical companies or other advertisers.
We do not permit advertisers to directly control AI-generated medical answers.
Advertising
Doc in the Bot may display sponsored content or advertising.
Our advertising practices are governed by our Advertising & Sponsored Content Policy.
We do not use individual medical conversations, diagnoses, symptoms, laboratory results, medication information, or uploaded medical records to create individualized advertising profiles unless we provide additional disclosure and obtain any consent required by applicable law.
Service providers
We may use third-party service providers to operate the Service, such as providers of AI models and infrastructure, cloud hosting, authentication, databases and storage, security, email, analytics, and customer support.
These providers may process information on our behalf where necessary to perform their services.
AI processing
Information submitted to AI-powered features may be transmitted to and processed by the AI technology providers used to operate those features.
Our practices concerning such information depend in part on the contractual and technical configurations of those services.
Data retention
We retain personal information for as long as reasonably necessary to provide the Service, maintain legitimate business and security records, comply with applicable law, and resolve disputes.
Where available, account holders may delete conversations or request account deletion.
Certain limited information may be retained where required or permitted by law, including for security, fraud prevention, dispute resolution, and legal compliance.
Security
We use reasonable administrative, technical, and organizational measures designed to protect information.
No system is completely secure, and we cannot guarantee that unauthorized access, disclosure, alteration, or loss will never occur.
Because health information can be particularly sensitive, users should carefully consider what information they choose to submit.
Data breaches
If a security incident occurs involving personal information, we will evaluate and provide notifications as required by applicable law.
Depending on the structure of the Service, the FTC’s Health Breach Notification Rule or other breach-notification requirements may apply.
HIPAA
HIPAA does not automatically apply to every application that handles health-related information.
Whether Doc in the Bot is subject to HIPAA in a particular context depends on its activities and relationships with covered entities and business associates.
Unless expressly stated otherwise for a particular service or relationship, you should not assume information submitted to Doc in the Bot is protected by HIPAA.
Your rights
Depending on where you live, you may have legal rights concerning personal information, potentially including rights to access, correct, delete, obtain a copy of, or withdraw consent concerning certain information.
Requests may be submitted through the contact options provided within the Service. We may need to verify your identity before completing certain requests.
Children’s privacy
The Service is not intended for children under 13.
We do not knowingly collect personal information from children under 13.
International users
If you access Doc in the Bot from outside the United States, additional privacy rights and requirements may apply depending on your jurisdiction.
Changes
We may update this Privacy Policy as the Service changes.
We will update the “Last Updated” date and provide additional notice where required by law.
Contact
Privacy questions and requests may be submitted through the contact options provided within the Service.
