Privacy policy

1. Who we are & scope

Onubot("we", "us", "our") is operated by AnchorBlock. This policy covers the Onubotapp and its backend services. It does not cover third-party services you reach through links, or the independent practices of the doctors you consult, who are registered medical practitioners bound by their own professional confidentiality duties and, where applicable, the Bangladesh Medical & Dental Council (BMDC) Telemedicine Guidelines. For any privacy question or request, contact us at privacy@onubot.app.

2. Information we collect

We collect what we need to provide the assistant and connect you with care. Items marked sensitive receive additional protection. Some information you provide directly; some is collected automatically.

3. How we use your information

• To provide core features: AI chat, document scanning and EMR extraction, BMI tracking, doctor discovery, booking, payments, and video consultations.
• To generate AI responses and extract data from your documents (see Section 5).
• To sync your data across sessions and support offline access via a secure on-device cache.
• To send appointment reminders, consultation alerts, and service notifications.
• To process payments and provide receipts.
• To maintain security, prevent fraud and abuse, debug, and improve reliability and quality.
• To comply with legal obligations and enforce our Terms.

We never sell your personal information, and we do not use your identifiable health data to train third-party public models.

4. Live video & voice consultations

5. Artificial intelligence processing

Onubot uses AI (Google Genkit with Gemini models) to power the chat assistant and to read and structure the medical documents you upload. When you use these features, the relevant content (your message, or the document image or text) is sent securely to the AI service to generate a response or extract records. AI output is provided for informational and supportive purposes and is not a substitute for professional medical diagnosis or treatment. We do not use your identifiable health data to train third-party public models. Any use of de-identified data to improve Onubot's own quality is done in aggregate.

6. How we share information

We do not sell your personal information. We share it only as needed, and each recipient is bound to protect your data:

Where feasible, personal identifiers are separated or de-identified before data is used for analytics or improvement.

7. Data storage, security & retention

Security.We apply administrative, technical, and physical safeguards: encrypted transport (TLS), encrypted video, restricted access controls, Firebase Authentication and App Check, and a secured cloud backend. Your on-device cache is stored in the app's private storage. No system is completely secure, and we cannot guarantee absolute security; you are responsible for protecting your password and device.

Retention. Account and health-profile data are retained while your account is active. Medical documents, extracted records, and consultation history are retained for as long as needed to provide continuity of care or to meet legal and regulatory requirements, after which they are securely deleted or de-identified. On deletion, data is removed from active systems; limited copies may persist in backups for a short period before being overwritten.

Breach notification. If we become aware of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by law, and take prompt steps to contain and remediate it.

8. Your rights & choices

• Access and export a copy of your data and medical records.
• Correct or update inaccurate profile or health information.
• Delete your account and associated data (subject to legal retention limits).
• Withdraw consent for optional processing, recordings, or marketing at any time.
• Manage notifications and revoke device permissions (camera, microphone, location) in your settings.

Delete your account or data: you can request deletion in three ways:

• On the web: use our account & data deletion request page.
• In the app: from your account settings, or withdraw patient-data consent to stop optional processing.
• By email: write to privacy@onubot.app with the subject "Data deletion request".

9. Children & family profiles

Onubotis not intended for independent use by anyone under 18. A parent or legal guardian may enter a minor's health information on their behalf and is responsible for that data. We do not knowingly collect data directly from children. If you believe a child has provided us information without guardian consent, contact us and we will delete it.

10. Permissions we request

The Onubot app requests these permissions. Each is used only for the purpose below, and you can deny or revoke any of them in your device settings.

11. Language & changes

Onubotis offered in English and Bengali. We may update this policy; the "Effective Date" above will change and, for material updates, we will notify you in-app. Continued use after the effective date constitutes acceptance.

12. Contact us

For privacy questions, requests, or complaints:

• Email: privacy@onubot.app or support@onubot.app
• Operator: AnchorBlock — anchorblock.ai

Questions about anything above? Get in touch →