Privacy Policy
Effective Date: August 15, 2024
Last Updated: May 29, 2026
This policy applies to the Medical HOPI Assistant mobile app (iOS and Android) and related services operated by Muhammad Malik / Innovators Generation.
⚠️ Medical Disclaimer
This app is for educational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition. In a medical emergency, call your local emergency number (for example, 911 in the United States).
1. Information We Collect
We collect information to provide AI-assisted symptom triage, chat assessments, and HOPI-style note generation. We do not sell your personal information.
1.1 Information You Provide
- Health-related inputs: Symptoms, medical questions, and clinical details you type or dictate into Chat or HOPI features.
- Generated content: AI-generated triage summaries, assessments, and HOPI-style notes created from your inputs.
- Voice input (optional): When you use speech-to-text, your device’s speech recognition may process audio to produce text. We do not intend to store raw audio on our servers unless required to provide the feature.
- Content reports (optional): If you flag AI content, you may submit the message text, a reason, and optional details.
- Account deletion requests (optional): If you use in-app account deletion, you may provide an email address and reason; this is used to process your request.
- Subscription status: We receive subscription/purchase status from Apple App Store and Google Play (we do not receive your full payment card number).
1.2 Information Collected Automatically
- Session identifier: A random
session_id (for example, direct-…) sent with chat and HOPI requests so conversations stay in context on our servers.
- Usage data: Feature usage counts (for example, monthly HOPI/chat limits) stored on your device and used to enforce plan limits.
- App settings: Language preference, theme, and configuration stored locally on your device.
- Device/app metadata: Basic technical information needed to operate the service (for example, app version, platform).
1.3 What We Do Not Collect (current app version)
- We do not require a user account for core chat/HOPI features.
- We do not collect precise GPS location in the app.
- We do not use third-party advertising SDKs or sell data for advertising in the current app version.
- We do not access your contacts, photos, or HealthKit/clinical records APIs unless a future version explicitly requests permission.
2. How We Use Your Information
- Provide quick triage, follow-up assessments, and HOPI note generation
- Maintain conversation context using
session_id on our backend
- Enforce free-tier and premium usage limits
- Process subscriptions through Apple/Google
- Investigate content reports and abuse
- Improve reliability, security, and quality of the service
- Comply with legal obligations and enforce our Terms of Use
3. App Store Privacy Labels (Summary)
Our Apple App Store “App Privacy” disclosure may include the following categories (aligned with this policy):
| Category | Examples in this app | Linked to identity? |
|---|
| Health | Symptoms and clinical text you submit | Generally no (anonymous session) |
| User content | Chat/HOPI text, reports, optional translation text | Generally no |
| Audio | Voice dictation (device speech recognition) | Generally no |
| Identifiers | session_id for chat memory | Generally no |
| Usage data | Feature usage / plan limits on device | Generally no |
| Purchases | Subscription status via App Store / Play | May be linked to store account |
We do not use this data for cross-app tracking or third-party advertising.
4. Subscription and Payment Information
Auto-Renewable Subscriptions
- Premium Monthly: $9.99/month, automatically renews unless cancelled
- Premium Yearly: $99.99/year, automatically renews unless cancelled
- Cancellation: Manage subscriptions in your Apple ID or Google Play account settings
- Refunds: Contact Apple Support or Google Play support for subscription refunds
Payment processing: Payments are processed by Apple App Store and/or Google Play. We do not store full payment card numbers.
5. Third-Party AI Service (OpenAI)
Medical HOPI Assistant uses OpenAI as a third-party AI service provider.
When you use Chat, Quick Triage, or HOPI features, your data is sent to our backend server
(encrypted HTTPS), which forwards it to OpenAI (GPT-4o API) to generate AI responses.
Data sent to our server and OpenAI may include:
- Your message text (symptoms, questions, or patient/clinical information you type or dictate)
- A session identifier (
session_id) to keep conversation context
- Your selected language code (e.g., en, ur, ar)
- Recent conversation history for context (where applicable)
Who receives this data:
- Our backend server — session management, medical knowledge retrieval (RAG), and routing to OpenAI
- OpenAI, LLC — AI text generation via the OpenAI API (OpenAI Privacy Policy)
Your permission (required): Before any data is sent, the app shows a
“Permission to Use AI” dialog that lists what is sent, who receives it, and links to this policy.
You must tap Agree & Continue before the first AI request. You may tap Not now to decline.
You can revoke consent anytime in Settings → Legal & Privacy → Data Sharing Consent.
OpenAI data protection: Data submitted through the OpenAI API is not used by OpenAI to train
or improve their models, per OpenAI’s API data usage policies. We do not sell your data or share it for
third-party advertising.
6. Other Third Parties
In addition to OpenAI, we may share limited data with:
- Google Translate (optional): If you enable auto-translation, message text may be sent to Google’s translation service to display results in your chosen language.
- Apple App Store / Google Play: Subscription and purchase status (payment card numbers are handled by Apple/Google, not us).
- Device speech recognition (optional): Voice dictation may use your device’s on-platform speech-to-text; we do not store raw audio on our servers.
7. Subscription and Payment Information
Auto-Renewable Subscriptions
- Premium Monthly: $9.99/month, automatically renews unless cancelled
- Premium Yearly: $99.99/year, automatically renews unless cancelled
- Cancellation: Manage subscriptions in your Apple ID or Google Play account settings
- Refunds: Contact Apple Support or Google Play support for subscription refunds
Payment processing: Payments are processed by Apple App Store and/or Google Play. We do not store full payment card numbers.
8. Data Security
We use reasonable technical and organizational measures, including:
- Encryption of data in transit (HTTPS/TLS)
- Access controls on servers and databases
- Limited access to operational data on a need-to-know basis
- Periodic review of security practices
No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
9. Data Retention
- Server chat/HOPI sessions: Retained as needed to provide the service and session memory; you can clear a session in-app (for example, “New symptom”) or request deletion.
- On-device data: Settings and usage counters remain until you delete the app or use account/data deletion in Settings.
- Content reports: Retained as needed to investigate abuse.
- Subscriptions: Governed by Apple/Google record retention.
10. Your Rights and Choices
- Clear chat: Use in-app options to clear conversation history / start a new symptom.
- Delete local data: Use Settings → delete account/data (where available) or uninstall the app.
- Subscriptions: Manage or cancel in Apple ID / Google Play settings.
- Access, correction, deletion: Email us at zub165@yahoo.com for privacy requests (we may need to verify your request).
- California / GDPR: You may have additional rights depending on your region; contact us to exercise them.
11. Children's Privacy
The app is not intended for children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided data.
12. International Users
Your information may be processed in the United States or other countries where our service providers operate. By using the app, you understand your data may be transferred internationally.
13. Legal Basis (GDPR / UK GDPR)
- Contract: To provide chat, HOPI, and subscriptions you request
- Legitimate interests: Security, abuse prevention, and service improvement
- Consent: Where required for optional features (for example, translation or voice)
- Legal obligation: Compliance with applicable law
14. Changes to This Policy
We may update this Privacy Policy. Material changes will be posted at this URL with an updated “Last Updated” date. Continued use after changes means you accept the updated policy.
15. Contact Us
16. HIPAA Notice
This app is not a HIPAA-covered entity or business associate. Do not use it as your official medical record system. For emergencies, contact local emergency services immediately.
© 2024–2026 Medical HOPI Assistant. All rights reserved.