DrSmartGo Privacy Policy

Effective Date: June 5, 2026

This Privacy Policy explains how DrSmartGo (“we,” “us,” or “our”) collects, uses, stores, shares, retains, and deletes your information when you use the DrSmartGo mobile application and related services (the “App”). By using the App, you agree to the practices described in this policy.

If you have questions, contact us at drsmartteam@gmail.com.

1. Information We Collect

DrSmartGo is a personal health application. To provide its features, we collect the following categories of information:

a. Account & Identity Information

• Phone number and email address (used to create your account and to send and verify one-time passcodes / OTPs)
• Name, age, date of birth, and gender
• Profile photo (optional)

b. Contact & Demographic Information

• Contact number, WhatsApp number, and postal/residential address
• Profession, education, and marital status
• Guardian details (name, contact number, relationship), where applicable

c. Health Information

You may add personal health data, including:

• Vital signs (blood pressure, blood glucose, BMI/weight)
• Medicines and medication history
• Lab reports and uploaded health documents
• Health records, health episodes, and health goals
• Allergies, vaccines, and medical conditions
• Medical, family, and social history, surgeries/procedures, and hospital admissions

d. Device & Technical Information

• Push notification token (to deliver reminders and notifications)
• Crash and error diagnostics
• App usage and interaction data (to understand and improve features)

We only collect health information that you choose to enter into the App.

2. How We Use Your Information

We use your information to:

• Create and manage your account and authenticate you (via OTP)
• Provide core App features: storing and displaying your health records, vitals, medicines, reminders, and reports
• Send notifications, reminders, and OTP messages you request
• Maintain the security, integrity, and reliability of the App
• Diagnose crashes and improve performance and features
• Respond to your support requests

We do not sell your personal or health information.

3. How We Share Your Information

We share information only as needed to operate the App:

• Service providers (sub-processors): We use trusted third parties to run the App. They process data only on our behalf and under confidentiality obligations:
  • Amazon Web Services (AWS): secure cloud hosting and storage of App data, and operational logging.
  • Expo Push Notifications: delivery of push notifications to your device.
  • Sentry: crash and error diagnostics.
  • Vexo Analytics: anonymous/aggregated usage analytics to improve the App.
  • Email/SMS providers: delivery of one-time passcodes and account messages.
• Data you choose to share: If you use sharing features within the App, your information is shared only with the recipients and to the extent you authorize.
• Legal requirements: We may disclose information if required by law, regulation, or valid legal process, or to protect the rights, safety, and security of users and the public.

4. Data Security

We take the protection of your data seriously. Sensitive personal and health fields are encrypted at rest, and data is transmitted over encrypted connections (HTTPS/TLS). Access to stored data is restricted. The App also supports device-level protections such as biometric/device authentication. While no system can guarantee absolute security, we apply reasonable technical and organizational safeguards appropriate to the sensitivity of health data.

5. Data Retention

We retain your personal and health information for as long as your account remains active, so that your records stay available to you.

If you request deletion of your account or data, we will delete your personal and health information from our active systems within 30 days of verifying your request. Residual copies may persist in encrypted backups for a limited period before being overwritten in the normal backup rotation, after which they are permanently removed. We may retain a minimal record of the deletion request itself where necessary to comply with legal obligations.

6. How to Delete Your Data

You can request deletion of your account and associated data at any time:

1. Send an email to drsmartteam@gmail.com from the email address (or referencing the phone number) associated with your account.
2. Use the subject line “Data Deletion Request.”
3. We will verify your identity and process the deletion within 30 days, and confirm by email once complete.

Deleting your data will permanently remove your health records, vitals, and profile from the App, and this action cannot be undone.

7. Children’s Privacy

The App is intended to be used by adults. Health profiles for minors should be created and managed only by a parent or legal guardian. If you believe a child has provided us information without appropriate consent, contact us at drsmartteam@gmail.com and we will take steps to remove it.

8. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise any of these rights, contact us at drsmartteam@gmail.com. We will respond within a reasonable timeframe and in accordance with applicable data-protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Effective Date” above and, where appropriate, by notice within the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: drsmartteam@gmail.com