Privacy Policy

We collect only what we need to provide the Service:

• Account & contact details — such as your name, email address, phone number, and password (stored only in hashed form on our servers).
• Health & profile information — details you add to your profile, including vitals you record, medical history, allergies and conditions, emergency contacts, and appointments.
• Content you upload — documents and images (for example, medical records or a profile photo) that you choose to add.
• AI assistant conversations — the messages you send to, and receive from, the in-app AI health assistant.
• Location — approximate or precise location, only when you use features such as finding nearby partners or maps, and only with your permission.
• Device & usage data — basic technical information (device model, operating system, app version, and diagnostic logs) used to keep the app working and secure. We do not log your health values, message contents, or credentials.

• To create and manage your account and provide the Service.
• To generate AI-assisted health insights and let you view and share your own information (for example, vitals trends with your doctor).
• To schedule and manage appointments with partners you choose.
• To secure the Service — including multi-factor authentication and fraud/abuse prevention.
• To maintain, troubleshoot, and improve the quality and accuracy of the Service.
• To communicate with you about your account and support requests.

We do not sell your personal information, and we do not use your health information for advertising.

We share information only in these limited situations:

• Service providers & processors — including the AI service that powers the health assistant, which processes your messages solely to respond to you and operate that feature under confidentiality obligations.
• Partners you choose — such as doctors, clinics, or health partners you decide to connect with or book through the app.
• Legal & safety — where required by applicable law, legal process, or to protect the rights, safety, and security of our users and the Service.
• Business transfers — in connection with a merger, acquisition, or reorganization, subject to this policy.

We apply administrative, technical, and physical safeguards designed for health data, including:

• Encryption of sensitive data at rest on your device and encryption in transit (TLS) between the app and our servers.
• Authentication tokens stored in the device’s secure keystore, separate from other app data.
• Multi-factor authentication to help protect your account.
• Access controls that limit who can access personal information.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security; we work continuously to protect your information and improve our safeguards.

We keep your information for as long as your account is active or as needed to provide the Service and meet legal obligations. You can request deletion of your account and associated personal information by contacting us at admin@hospitall.tech. We will delete or de-identify your data unless we are required to retain it by law.

• Access & portability — view much of your information directly in the app.
• Correction — update or correct your profile and health details.
• Deletion — request deletion of your account and data.
• Withdraw consent — revoke permissions such as location, camera, or storage at any time in your device settings.

To exercise any of these rights, contact us at admin@hospitall.tech.

The Service is not directed to children under 18, and we do not knowingly collect their personal information without a parent or guardian’s involvement. If you believe a child has provided us information, contact us and we will take appropriate steps.

The app uses third-party services to function, such as mapping providers for location features. These providers process data under their own privacy policies. We encourage you to review them.

HospitALL is based in Pakistan, and the Service is operated from Pakistan. By using the Service, you understand your information is processed in accordance with applicable Pakistani law and this policy.

We may update this policy from time to time. When we make significant changes, we will update the effective date above and provide notice within the app or on our website.

If you have questions about this policy or your information, contact:

HospitALL Pvt. Ltd.
[Registered office address]
Email: admin@hospitall.tech