Privacy Policy
How we collect, use, protect, and manage your personal and medical information.
Consent
By using our website and mobile application, you consent to our Privacy Policy and its terms.
Identity of the service provider
We, “OKEY BO” MCHJ, are a provider of medical information services. Our platform acts as a digital bridge between medical professionals and users and provides tools for managing health information, communication, and information analysis. We do not provide medical care directly; instead, we provide information technology services that support its delivery.
Information we collect
When we ask you to provide personal information, we will explain which information is required and why.
- Registration: Personal identification data such as phone number, first name, last name, age, height, weight, and gender.
- Health information (e-Card): Doctor diagnoses, recommendations, medication history, and medical documents uploaded by the user (PDF/images).
- Daily indicators: Water intake, sleep duration, step count, and calorie intake data.
- Communication: Text messages, audio recordings, and media files sent via chat with a doctor.
How we use your information
We use the information we collect for the following purposes:
- Providing, operating, and maintaining our services.
- Improving, personalizing, and expanding our services.
- Enabling secure communication with doctors through the app.
- Sending push notifications about medication intake and appointments.
- Detecting and preventing fraud.
Log Files (Automatically transmitted data)
When you use the app, the following technical data may be recorded automatically:
- IP address, device type (OS type), and browser data.
- Usage session duration, date, and time.
- Screen parameters and the list of supported languages.
AI Assistant service
- Data analysis: The AI reads only the existing information in your e-Card and presents it in a clear format, and also helps quickly find the needed parts within your data.
- Limitations and medical responsibility: The AI system does not provide medical advice and under no circumstances can replace professional medical advice, diagnosis, or treatment. Any AI-based analysis, commentary, or guidance provided through the platform is for informational purposes only.
- Guidance-oriented suggestions: Based on your e-Card data, the AI may provide only general guidance, but before making any medical decision you must consult a qualified medical professional. Any digital risk scores and other calculations do not constitute a clinical diagnosis.
Processing through third-party AI services
In providing AI-assisted health analyses and explanations, some data may be processed through trusted third-party AI providers, such as OpenAI or similar external API services.
- Anonymized data: In such cases, only anonymized health data or data that cannot directly identify an individual is shared. Personally identifying information, including name, phone number, exact contact details, and similar data, is not provided to AI providers.
- Privacy standards: Contracts with all third-party AI partners require strict confidentiality and prohibit the use of data for marketing, advertising, or independent purposes. Data is used only within the scope of our services for technical processing and analysis.
Data protection rights
We want to ensure that you are fully aware of all of your data protection rights. Every user has the following rights:
If you make a request, we will respond within one month. If you would like to exercise any of these rights, please contact us.
- Right of access: You have the right to request copies of your personal data. We may charge a small fee for this service.
- Right to rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete. If any document of material importance has been completed by us, the final decision remains with us.
- Right to erasure: You have the right to request that we erase your personal data under certain conditions.
- Right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- Right to object to processing: You have the right to object to our processing of your personal data under certain conditions.
- Right to data portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Data security and storage location
- All personal and medical data are stored in protected databases located within the territory of the Republic of Uzbekistan. Access to our servers is limited and controlled, and only authorized technical personnel may access them.
- During data transmission between the app and the server, modern encryption protocols such as HTTPS/TLS are used to protect your data from interception by third parties.
- Access levels in our system are role-based: medical professionals can only view data relating to their own patients, while technical personnel have access only to the minimum amount of data necessary to provide technical support.
- To prevent data loss, unauthorized access, modification, or disclosure, we regularly create backup copies and use security systems such as monitoring, audit logs, and access control.
- We do not sell or rent user data and do not use it for marketing or advertising purposes. Data is used only to provide the service, support technical operations, and ensure security.
Account and data deletion
- User control: Every user has the right to request deletion of their account and the related health data at any time. This right provides a practical mechanism for exercising the right to erasure described above.
- Permanent deletion: After a user requests account deletion, the personal and medical data stored in our databases located in Uzbekistan will be permanently deleted to the fullest extent possible within applicable legal requirements and technical limitations, in a manner that cannot be restored.
- Backup copies: Data remaining in backup systems may be retained only for a limited period for system recovery and information security purposes. After that period ends, it will also be permanently deleted in accordance with our standard backup deletion policies.
Children's information
Protecting children while they use the internet is one of our priorities. We encourage parents and guardians to observe, participate in, and monitor and guide their children's online activity.
OKEY BO does not knowingly collect any personally identifiable information from children under 18 years of age.
Changes to this Privacy Policy
We may update our Privacy Policy from time to time. Therefore, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes take effect immediately after they are posted on this page.
Contact us
If you have any questions or suggestions about our Privacy Policy, please do not hesitate to contact us: info@okeybo.uz