What data we collect
- • Identity and contact data: name, email, mobile number, role, city/country and account details needed to identify and contact you.
- • Health report data: uploaded PDFs/images, lab values, dates, reference ranges, abnormal markers, smart summaries, trends and timeline entries.
- • Lab, doctor and partner details: information needed to connect a report to the correct lab, hospital, doctor or authorized workflow.
- • Consent and access logs: records of report processing consent, OTP verification, sharing, viewing, revocation and deletion requests.
- • Support, security and device data: support messages, basic technical logs and analytics needed to keep the service reliable and secure.
We do not sell patient health data.
How we use your data
- • To create and maintain your smart health dashboard, trends, report summaries and health timeline.
- • To extract report values and explain them in simple language with doctor-consultation guidance.
- • To enable secure sharing with doctors, family managers, labs or hospitals under the authorized workflow.
- • To send controlled report, retest and follow-up notifications through secure access links.
- • To provide support, prevent abuse, investigate security events, improve reliability and comply with legal/operational obligations.
Consent and authorization
- • Patients are informed that DrGuru.ai will process their lab report to create a smart health dashboard, explain values in simple language, support secure doctor sharing, and send report/retest/follow-up notifications.
- • Patient access and report processing are linked to clear consent, OTP verification and stated service purposes.
- • Labs and hospitals using DrGuru.ai confirm they are authorized to share reports for smart report delivery and patient dashboard creation under the agreed partner workflow.
- • Retest and follow-up reminders are treated as controlled health-service communication, not open advertising.
Responsible AI processing
AI is used to extract, organize and explain report information. It does not replace doctor diagnosis, prescriptions, treatment decisions or emergency care. We process only the necessary report information for extraction, explanation and dashboard generation, and keep the original report available so clinicians can verify source data.
Patient reports are not used by DrGuru.ai for unrelated model training or resale without explicit consent. Low-confidence extraction or unclear report formatting can be flagged for review before relying on structured output.
Sharing and disclosure
- • With your direction or an authorized workflow: reports and dashboards may be shared with doctors, family managers, labs or hospitals as permitted by consent and role-based access.
- • Service providers: infrastructure, storage, messaging, analytics, email and AI providers may process only what is needed to operate the platform under contractual controls.
- • Support and security: restricted DrGuru.ai support/admin access is used only for support, security, processing and operations, with sensitive actions logged.
- • Legal and safety: we may disclose information if required by law or needed to protect rights, safety or service integrity.
Safe notifications
- • WhatsApp/SMS are used for notification and access, not for exposing full medical details in an open message thread.
- • Patient messages may say that a smart health report is ready and provide a secure link protected by OTP.
- • We do not send sensitive lab values, diagnosis-like wording or full report details openly through WhatsApp/SMS.
- • Doctor notifications and report delivery depend on the authorized lab/hospital workflow and require controlled access.
Cookies and analytics
We use essential cookies for security, session management and OTP/authentication flows. We use limited analytics to understand feature usage and improve reliability. Where required, we ask for consent. You can control analytics through browser or OS settings and any in-app preferences we make available.
Data retention and deletion
- • Reports are retained for dashboard continuity unless deletion is requested or partner policy requires a defined retention window.
- • Patients can request report/account deletion, stop reminders or withdraw consent, subject to legal and operational retention requirements.
- • Audit logs and consent receipts are retained for security, accountability and compliance needs.
- • Backups may retain data for a limited time after deletion while backup cycles expire.
Your rights
- • Access your data and get a copy.
- • Correct inaccurate information.
- • Delete your account or reports, subject to legal and operational obligations.
- • Restrict or object to certain processing.
- • Port your data in a machine-readable format.
- • Stop reminders or withdraw consent for future processing where applicable.
To exercise these rights, email [email protected].
Hosting and transfers
DrGuru.ai uses an India-first hosting approach for Indian healthcare users: the primary application server and database are hosted on DigitalOcean infrastructure in Bangalore, India. Some service providers may process data in other regions where needed to operate the service; where data leaves your region, we rely on contractual and technical safeguards.
Children
Family managers may manage dependents’ profiles as permitted by local law. If you believe a child’s data was provided without proper authorization, contact us and we’ll help.
Contact
Questions about privacy? Email [email protected].