Privacy Policy
Last updated: 29 July 2026
This policy explains what data ProMed+ collects, why, and how we protect it. Health data is a special category of personal data and is processed with the utmost care.
Data we collect
Account data: first/last name, phone number, email (optional), date of birth, language and theme.
Health data: the examinations you book and the results labs upload for you.
Technical data: device, approximate location (to show nearby labs) and session logs.
Why we process data
To provide the service (booking, delivering results), verify your account (OTP), process payments, and keep the platform secure.
We do not sell your health data or share it with advertisers. The sub-processors we use to run the service (e.g. the AI assistant) are disclosed below.
AI assistant & sub-processors
When you use the AI assistant (Ada) in ProMed+, the messages you type are sent to our sub-processor Anthropic (USA) to generate a response. This is an international data transfer, protected by appropriate contractual safeguards.
The AI assistant does not provide a medical diagnosis — responses are informational only. These messages are not used for advertising or shared with advertisers. Using the AI assistant is optional.
Data storage
Data is stored on servers within the EU (Frankfurt) and encrypted in transit and at rest.
Share links created when sending a result to a doctor are time-limited and can be revoked at any time.
Data retention
Account data is retained while your account is active. When you delete your account, personal data is fully removed from primary systems within 30 days and from backups within 90 days.
Health data and lab results remain available while your account is active and are deleted when the account is deleted; they may be kept only in anonymised form where required by law.
Payment and billing records are retained for the period required by financial legislation (typically 5 years).
Session and technical logs are retained for at most 12 months, after which they are deleted automatically. OTP/verification codes are transient and expire within a few minutes.
Your rights
You can view, correct your data and delete your account. On deletion, personal data is scrubbed and shared-result links are revoked.
Requests: privacy@promed.az
For questions about this policy or to request deletion of your data, contact us: privacy@promed.az