Privacy Policy

Last updated: September 2026 · GDPR Compliant (UK)

1. Data We Collect

Account data: Email address, name, and password (hashed)
Health preferences: Age group, gender (optional, to personalise responses)
Conversation data: Questions you ask and AI responses
Technical data: IP address, browser type, device type, pages visited
Cookies: Session cookies and preference cookies

2. How We Use Your Data

To provide and improve the Service
To personalise AI responses based on your stated health preferences
To enforce usage limits and prevent abuse
To send transactional emails (verification, password reset)
To detect and prevent fraud or abuse

3. Data Retention

Account data: Retained until account deletion
Conversation history: Free tier — 7 days. Pro tier — indefinite
Visitor logs: 90 days
Deleted accounts: Purged within 30 days

4. Third Parties

SendGrid: Email delivery
Cloudflare: CDN, DDoS protection, and IP data
AI Providers: Your questions are processed by third-party AI providers to generate responses. Refer to their respective privacy policies.
Sentry: Error monitoring (anonymised)

5. Your Rights (GDPR)

Right to access your data
Right to rectification
Right to erasure ("right to be forgotten")
Right to data portability
Right to withdraw consent

To exercise any of these rights, log in and go to Settings → Delete Account, or email: privacy@askmedicalfacts.com

6. Cookies

We use essential cookies (session management, CSRF protection) and preference cookies (dark/light mode). We do not use advertising cookies or tracking pixels. You can decline non-essential cookies via the cookie banner.

7. Contact

Data Controller: AskMedicalFacts · privacy@askmedicalfacts.com