Privacy Policy

1. Scope

This Privacy Policy explains how AIMEDIMIND LLC, which operates OnlineCareAI (“OnlineCareAI”, “we”, “us”), collects, uses, discloses, and protects personal information through its website, mobile application, and related AI-powered health education services. OnlineCareAI currently provides AI-based information only; it does not offer telehealth consultations or direct clinical care. You can contact us at support@onlinecareai.com.

2. Information We Process

Depending on the features you use, information may include:

• account details, such as your email address and sign-in identifiers;
• health questions, symptom descriptions, wellness check-ins, and other information you choose to submit;
• text messages, voice audio and the transcripts of your conversations;
• context saved from earlier conversations so the assistant can follow up;
• documents you add to your Digital Wallet;
• health metrics from Apple Health or Health Connect, only if you connect them;
• your location, only if you turn it on, for example to find nearby pharmacies;
• your notification token and notification settings;
• your subscription or purchase status from Apple or Google (we do not receive your card number);
• records of your permission choices; and
• device, usage, diagnostic and security information.

Health-related information can be sensitive even if you do not provide your name.

3. How We Use Information

We process information to respond to questions and provide AI-generated educational content; operate requested features; maintain accounts and conversation functionality; protect against misuse and security incidents; troubleshoot and maintain the Services; respond to support and privacy requests; and comply with applicable legal obligations. Any additional use requiring consent will be subject to the applicable consent process.

4. AI Processing and Service Providers

OnlineCareAI uses AI engines to generate AI responses. When you give permission, the information needed for your request is sent to AI engines through its API. This can include your messages and health details, microphone audio when you use voice, and relevant profile or saved conversation context. We use AI engines API with zero data retention, which means AI engines does not keep your inputs or the responses it generates after your request is completed. AI engine does not use this API data to train its models.

We do not send your information to any other AI engines. We also use service providers for cloud hosting, security, notifications, app-store billing and operational support. They process information only to provide their services to us.

We do not sell your personal information, and we do not share your health information for advertising. Do not submit information that is unnecessary for your request.

5. Hosting, Security and HIPAA

OnlineCareAI runs on cloud infrastructure that offers HIPAA-eligible services, and we use security safeguards designed to protect your information, including encryption in transit and at rest and access controls.

HIPAA is a US law that applies to certain organizations, such as healthcare providers, health plans and their business associates. OnlineCareAI is a consumer health information app and does not provide medical care. HIPAA may therefore not apply directly to your use of OnlineCareAI, and other laws govern how we handle your information, such as state consumer health data laws and, where applicable, the GDPR. We apply HIPAA-aligned safeguards voluntarily. This does not make OnlineCareAI a HIPAA covered entity, and it is not a certification by any government agency.

6. Your Permission and Our Zero-Knowledge Design

OnlineCareAI is designed so that the sensitive health information you store in the app is encrypted with keys that remain under your control. This means OnlineCareAI cannot read that information unless you give permission for a specific use.

When you choose a feature that needs your information, such as asking the AI assistant a question or asking it to explain a document, the app first asks for your permission. If you agree, the information needed for that request is used for that purpose only: it is sent to our AI engines to generate your response and is not used for advertising. If you decline, the feature does not start and the information is not sent.

You can withdraw your permission at any time in the app’s settings. Withdrawing stops future requests but does not undo processing that has already taken place.

Zero-knowledge does not apply to information that you choose to share with us or with other people, to information we need to run your account (such as your email address, subscription status and notification settings), or to information we receive when you contact support.

7. Ongoing Conversations and Notifications

If you use Ongoing Conversations, OnlineCareAI’s AI may decide when to send you a push notification that follows up on something you discussed earlier, for example to ask how you are feeling after an activity you mentioned. To do this, the AI uses context saved from your earlier conversations.

Notifications are delivered through Apple’s or Google’s notification services. We keep notification text general and avoid sensitive health details on your lock screen. You can turn notifications off in your device settings or in the app, and you can review and delete your saved conversation context in the app at any time.

Ongoing Conversations is not medical monitoring. OnlineCareAI does not watch for emergencies or contact anyone on your behalf.

8. Storage and Retention

We keep your account information, conversation history, saved context, wallet documents and health metrics until you delete them or close your account. When you delete an item or close your account, we delete it from our active systems within 30 days. Encrypted backups are overwritten within 90 days after that. Our AI engines does not retain your inputs or responses (zero data retention).

We may keep limited records for longer where the law requires it, or to resolve disputes, prevent fraud and maintain security, such as billing records and records of your permission choices.

9. Disclosure of Information

We may disclose information to service providers that support the Services, when you direct us to share information, to comply with valid legal requirements, to protect against fraud or security threats, or in connection with a corporate transaction subject to applicable law. When you leave OnlineCareAI for a third-party retailer or service, that party’s privacy practices govern information you provide directly to it.

10. Security

We use security measures intended to protect information, including controls appropriate to the systems and information involved. No internet-based system can be guaranteed completely secure. You should use a strong password, protect access to your device, and avoid sharing unnecessary identifying information.

11. Your Privacy Choices and Requests

You can delete conversations and close your account in the app’s account settings. You can also manage your AI permissions and notifications there.

Depending on where you live, you may have the right to: access your personal information; correct it; delete it; restrict or object to certain processing; receive a copy in a portable format; withdraw your consent at any time; and appeal a decision we make about your request. Withdrawing consent does not affect processing that took place before you withdrew it.

To make a request, email support@onlinecareai.com with the subject “Privacy Request.” We may need to verify your identity before acting on a request, and we respond within the time required by applicable law. We may keep information where the law permits or requires it. If you disagree with our decision, you can appeal by replying to our response, and you may also contact your local data protection or consumer protection authority.

12. Consumer Health Data

Information about your symptoms, health concerns, and wellness may qualify as consumer health data under certain state laws even when HIPAA does not apply. We process such information to provide requested features and for the purposes described in this Policy. Additional disclosures, consent, and rights may apply depending on your state and the type of processing or disclosure. See our Consumer Health Data Privacy Policy or contact support@onlinecareai.com regarding consumer health-data rights.

13. Children

OnlineCareAI is for adults aged 18 and over. People under 18 must not create an account or use the Services.

14. International Use

If you access the Services from outside the United States, your information may be processed in the United States or other countries where our service providers operate. Privacy protections may differ by location. Additional rights may apply under the laws of your jurisdiction.

15. Changes

We may revise this Privacy Policy to reflect changes in the Services, processing practices, or applicable law. We will post the updated policy and effective date and provide additional notice where required.

16. Contact

For privacy questions or requests, email support@onlinecareai.com.