Privacy policy of the Doctor AI app

The operator processing the data of users of the Doctor AI mobile app (the “App”) is sole proprietor Mikhail Aleksandrovich Grigoriev, TIN 772601582696, state registration number 326774600507616 (the “Operator”). The contact for any data-related question is newlife2506@yandex.ru.

This document describes data processing within the App specifically. Data processing on the om-digital.ru website and in the Operator's other services is described in the general privacy policy.

The App processes only the information you enter or upload voluntarily when you request an explanation:

• A description of symptoms or a question — text you type in yourself.
• Medical document files — PDF files and images of test results that you attach (each file is limited to 10 MB).

The App does not ask for your first name, surname, date of birth, address or telephone number, and has no access to your contacts, location, background camera, calls or messages. No registration or account is required.

A description of symptoms and test results are information about health, that is, a special category of personal data under Federal Law No. 152-FZ. Such information is processed solely with your consent, which you give when you yourself send symptoms or a file for explanation. You are free not to provide this information — no explanation will then be produced, but the rest of the App continues to work.

To produce an explanation, the App sends the text you entered and the attached files to the Operator's server, and the server passes them to the artificial intelligence service Anthropic PBC (USA), on the basis of which the answer is generated. This is a cross-border transfer of data, and by sending a request you consent to it.

There are no other recipients. The Operator does not pass this information to third parties, does not sell it, does not use it for advertising and does not build user profiles from it. The App contains no advertising networks and no behavioural analytics.

The symptom text and the uploaded files are processed on the server in memory, at the moment of the request: they are not written to the server's disk, do not enter any database and are not kept in logs. Once the answer has been produced, nothing remains on the Operator's side.

How data is retained on Anthropic PBC's side is governed by that service's own policy and is outside the Operator's control.

To count free consultations and guard against abuse, the Operator keeps a minimal set of technical details that do not reveal your identity:

• Installation identifier — a random value the server issues to your copy of the App.
• Hash of the device identifier — an irreversible value (SHA-256 with a secret salt) derived from the Android system identifier. The identifier itself never leaves the device and cannot be recovered from the hash; the value exists only so that the free-consultation counter is not reset by reinstalling.
• A counter of free consultations used and a flag showing whether a subscription is active.
• A contact for restoring access — only if you provided one yourself when subscribing.
• Dates when the record was created and when it was last used.

The IP address is used solely for rate limiting, is held in memory for a short interval and is not written to any database.

Your consultation history is stored locally, in your device's memory, and is not sent to the Operator's server. It is available only on that phone and is deleted together with the App's data.

Symptoms and files are not stored by the Operator at all (section 5). The technical installation record (section 6) is kept while you use the App and is deleted on your request.

• The history on your device — clear the App's data in Android settings or uninstall the App.
• The technical record on the server — write to newlife2506@yandex.ru. The request is carried out within 30 days, and confirmation is sent to the same address.

You also have the right to ask what data about you is being processed, to require it to be corrected, to withdraw your consent to processing, and to complain to the supervisory authority.

The App is not intended for unsupervised use by children. If a minor uses the App, it must be with the knowledge and consent of a parent or other legal guardian.

Data is exchanged between the App and the server over a secure HTTPS connection. Access to the server is restricted by the Operator. Calls to the explanation service require an access key, which is not stored in plain form on the user's device.

The Operator may amend this document. The current version is always available at the permanent address om-digital.ru/app-privacy.html. The date of the last change is given below.

Version dated 28 July 2026. This English text is a translation provided for convenience; the Russian version at om-digital.ru/app-privacy.html is the legally binding one.