Privacy policy

Who we are

WeAD AI Health Clinics ("we", "the Clinic") is a WeAD ecosystem application served at aihealthclinics.org. This policy describes how we handle information when you use the Clinic.

What we collect

• Account data — email, display name, and session tokens, obtained through WeAD single sign-on (WeAD account) or our email + one-time-code sign-up flow. The OTP is delivered by Resend on behalf of WeAD.
• Health intake data you enter in clinic forms — symptoms, vitals, lab values, occupational answers, free-text notes, and optional images.
• Consultation data — the messages you type or speak to the AI doctor, the AI's replies, voice transcripts, and the specialty you picked. Stored as chat text under your account. An attached photo is sent to the AI for that turn only; we keep a note that an image was shared, not the image file.
• Image uploads — photos on clinic forms (dermatology, gastroenterology stool photo) are read into memory, sent to our AI vision provider, and saved to your account upload folder so the visit report can reference them. Consultation-room photos are not saved to that folder.
• Doctor applications — if you apply at Remote Doctors, we collect your name, email, country of practice, specialty, license number, years of experience, and any message you write. This is stored for review only and not shared with patients without your consent. If you request a remote physician we also store your name, email, preferred time, topic, and notes on a waitlist. Those forms do not send an automated email.
• Technical data — IP address, browser type, and request logs used for security, rate limiting, and abuse prevention.
• Local preferences — speech speed and clinic type stay in localStorage. Page language uses the googtrans cookie plus aihc_lang in localStorage so the AI can reply in your chosen language.

Cookies and similar technologies

• Session cookie (gutheal_session) — required for sign-in. Expires when you sign out.
• Translate cookie (googtrans) — set if you change the page language; allows Google Translate to render the page in your chosen language.
• No advertising cookies are set by the Clinic. We do not set a third-party analytics cookie. The Clinic does send a first-party pageview beacon (path and IP, not a cookie) to operate and secure the service.

How we use your data

We use your information to:

• Authenticate you and maintain your visit and consultation history
• Generate educational reports and AI consultation replies
• Run image analysis when you attach a photo
• Look up public health references (PubMed, MedlinePlus, OpenFDA, RxNorm) for citations
• Protect the service (fraud prevention, rate limits, abuse controls)
• Improve reliability and security of the platform

We do not sell your health information to advertisers. We do not claim a real licensed physician has reviewed your case. AI replies are educational, period.

AI and third-party processors

To produce responses, your prompts, relevant context from your account, and any images you attach may be transmitted to AI inference providers. Providers may change as the service is maintained. Public health-reference APIs (NIH / PubMed E-utilities, MedlinePlus Connect, OpenFDA, RxNav) are queried for evidence citations. Google Translate, when used, is subject to Google's policies. Hosting and infrastructure providers process data on our servers.

Do not enter information you are legally required to keep only on certified medical systems unless you accept this processing model.

Remote physician requests

You can request a remote licensed physician, and licensed doctors can apply to join. Face-to-face video starts only after a verified physician accepts a request; additional consent (including any required regulated-health terms in your jurisdiction) will be requested at that point. Until a human physician accepts, no licensed clinician reviews your data on our behalf. AI consults are educational personas, not a human review.

Retention

Visit and chat records are stored in application data files tied to your user account until you delete them, request deletion, or we remove them during account closure or legal obligation. Server logs are retained for a limited period for security review.

Your choices and your rights

• You may stop using the Clinic at any time.
• You may request a copy of your visit and chat data, or request deletion, by messaging us on Telegram at @weadvertizers. We will respond within a reasonable period.
• You can clear browser storage to reset local preferences.
• You can simply not attach images if you do not want visual data processed.

Security

We use industry-standard practices including HTTPS, hashed session tokens, access controls, and rate limiting. No method is 100% secure; report suspected issues on Telegram at @weadvertizers.

Children

Pediatric flows are intended for guardian-led use. The Clinic is not directed at children under 13 to operate independently. Guardians are responsible for any minor's use of the service.

International users

Data may be processed in jurisdictions where our servers and AI providers operate. You are responsible for compliance with local health-privacy laws (e.g. HIPAA in the U.S., GDPR in the EEA, PIPEDA in Canada) when exporting your own notes from the Clinic. The Clinic itself is not a HIPAA covered entity and is not certified as a regulated health record system.

Changes

We will post updates on this page with a revised date. Material changes warrant re-reading before continued use.

Contact

Privacy questions, data requests, or security reports — message us on Telegram at @weadvertizers.