HealthFirst AI
Privacy Policy
This policy describes the information HealthFirst AI collects and how we use it to run doctor discovery, profiles, review flows, billing, and AI-assisted features.
Last updated: May 16, 2026
Overview
This Privacy Policy explains how HealthFirst AI collects, uses, stores, and shares information when you use our doctor discovery, profile, review, feedback, QR, billing, AI, and account features.
By using HealthFirst AI, you understand that your information will be handled as described here. This policy is designed to be practical and readable, but it does not replace legal advice for your specific compliance needs.
Information You Provide
We may collect information you enter into HealthFirst AI, including your name, email address, business name, doctor or hospital details, profile descriptions, addresses, phone numbers, website links, platform listing URLs, uploaded images, feedback questions, reviews, ratings, customer responses, subscription choices, and account preferences.
If you use symptom search or AI features, we may process the text you submit, such as symptoms, context, answers, free-form descriptions, or draft review content, so the service can return relevant results or suggestions.
You should avoid submitting information that is unnecessary for the feature you are using, especially highly sensitive medical, financial, identity, or third-party information.
Health And Sensitive Information
Symptom descriptions, healthcare-related profile details, doctor matching inputs, and feedback may contain sensitive personal information. We process this information to provide the requested feature, improve service quality, maintain safety, prevent abuse, and comply with legal obligations.
HealthFirst AI is not a medical record system. Do not use the service as the only place to store medical records, prescriptions, test results, emergency information, or information needed for treatment.
Account And Login Data
When you sign in, we may receive authentication information from providers such as Google through our authentication system. This can include your email address, basic profile information, login identifiers, and session data.
We use this information to create and secure your account, connect you to your profiles or dashboard, and prevent unauthorized access.
Payment Information
Paid features may be processed by payment providers such as Razorpay. We may store payment status, plan details, subscription identifiers, and billing-related metadata, but full card or payment instrument details are handled by the payment processor.
Payment providers process your payment information according to their own privacy policies and security practices.
Technical And Usage Information
We may collect technical information such as device type, browser, IP address, pages visited, timestamps, QR code interactions, referral paths, error logs, and approximate location signals where needed for product functionality.
If you choose to use location detection, your browser may ask for permission. Location may be used to suggest a city for doctor discovery, and you can deny or clear that permission through your browser settings.
We may use cookies, local storage, session storage, and similar technologies to keep you signed in, remember preferences, secure the service, measure usage, and debug product issues.
How We Use Information
We use information to operate HealthFirst AI, provide search and profile features, generate QR flows, store reviews and feedback, manage accounts, process subscriptions, improve product quality, debug issues, prevent abuse, investigate misuse, secure the service, and communicate service-related updates.
We may also use submitted text with AI systems to generate or improve responses, such as doctor matching, review drafting, or wording assistance.
We may aggregate or de-identify information so it no longer reasonably identifies a specific person or account, and use that information for analytics, product improvement, research, safety, and business reporting.
Legal Bases And Consent
Where applicable law requires a legal basis, we process personal information based on your consent, performance of a contract, legitimate service operations, compliance with law, security needs, or other lawful grounds available under applicable law.
Where consent is required, you may withdraw consent through available product controls, browser settings, account settings, or by contacting us. Withdrawal may limit or disable features that depend on that information.
Public Information
Doctor, hospital, and business profile pages may be public when published. Public pages can include names, bios, specialties, locations, contact details, booking links, website links, facilities, images, and other information you choose to publish.
Do not submit information to a public profile unless you have permission to share it.
Sharing With Service Providers
We may share information with vendors and infrastructure providers that help us run HealthFirst AI, including hosting, database, authentication, AI, analytics, email, payment, logging, customer support, and security providers.
These providers are allowed to process information only as needed to provide services to us, comply with law, or protect their systems.
Third-Party Links And Platforms
HealthFirst AI includes links to external platforms where customers may post reviews or where providers may maintain listings. Once you leave HealthFirst AI, the third-party platform controls its own collection and use of information.
You should review the privacy policies of any external platform you use.
Legal And Safety Disclosures
We may disclose information if we believe it is necessary to comply with law, court orders, lawful requests, payment disputes, tax or accounting obligations, security investigations, fraud prevention, enforcement of our Terms, protection of users, or protection of our rights and systems.
If the service is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to appropriate safeguards.
International Processing
HealthFirst AI may use service providers or infrastructure located in India or other countries. This means information may be processed or stored outside your state, region, or country, subject to applicable legal requirements and provider safeguards.
Where law requires restrictions or safeguards for cross-border transfers, we aim to follow those requirements as they apply to the service.
Data Retention And Deletion
We keep information for as long as needed to provide the service, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and improve the product.
You may request access, correction, deletion, or withdrawal of consent for your account or profile information through the support or account channels available in the product. Some information may be retained where required by law, security, billing, dispute resolution, backup, fraud prevention, or legitimate operational needs.
Public information already copied, indexed, cached, shared, posted on third-party platforms, or stored by other users may not be fully removable by HealthFirst AI.
Security
We use reasonable technical and organizational measures to protect information. No online service can guarantee absolute security, so you should use strong account credentials and avoid submitting sensitive information that is not needed for the service.
For medical concerns, avoid sharing unnecessary highly sensitive details in public profile fields or review text.
Children
HealthFirst AI is not intended for children to use without appropriate parental or guardian involvement. If you believe a child has provided personal information without appropriate consent, contact us so we can review and take appropriate action.
Healthcare-related searches or submissions for minors should be handled by a parent, guardian, caregiver, or qualified healthcare professional as appropriate.
Your Responsibilities
You are responsible for the information you submit, including ensuring that you have permission to provide information about doctors, hospitals, staff, customers, patients, or other third parties.
Do not submit confidential patient records, another person's sensitive information, or private contact details unless you have a lawful basis and permission to do so.
Changes To This Policy
We may update this Privacy Policy as the product changes or legal requirements evolve. The updated date on this page will show when the policy was last revised.
Continued use of HealthFirst AI after an update means you understand the revised policy.
Contact
For privacy questions, data requests, consent withdrawal, correction requests, deletion requests, or concerns, contact the HealthFirst AI team at hello@healthfirstai.com or through the support or account channels available in the product.