Secure transport
The published app uses HTTPS/TLS between your browser and the service.
PRIVACY DETAILS
Your records deserve a clear explanation.
What we store, how access works, and how you can take your information with you or remove it.
Private storage
Original files are stored privately, without unrestricted public file URLs.
Account access
Every record and download request checks the signed-in owner on the server.
Your data controls
Export your account, delete individual files, or remove your Swasthya account in Settings.
What stays, and for how long?
Uploaded records: Files and metadata remain until you delete them. Deleting a record removes both its original object from active file storage and its database entry. If a deletion fails, the app reports the failure so you can retry.
Appointments: Saved requests and visits remain in your history. Online requests are stored in Supabase and their status is managed by authorised administrators. Older personal plans can still be removed through their history controls. Account deletion removes all saved appointments and visits.
Data export: Settings → Export my data downloads a ZIP with your profile, medical-record metadata, original files, visits, requests, visit preparation notes, reviews, and alert read state. Its README identifies files that were unavailable during export. Keep your downloaded archive private.
Account deletion: Settings → Delete my Swasthya account requires an explicit typed confirmation. It removes your Swasthya profile, files, records, appointments, visit preparation notes, reviews and alert read state from active storage. It does not delete your email or ChatGPT sign-in identity. Signing in again gives you an empty workspace.
Backups: Active-storage deletion does not promise immediate erasure from infrastructure backups. Backup retention follows the configured provider’s schedule. Contact the service owner for an erasure request covering backups; no fixed backup-erasure deadline is claimed here.
Sign-in: You can sign in through ChatGPT or with email and password. Sites manages ChatGPT sign-in; Supabase manages email/password authentication and verification emails. Each sign-in method has a separate workspace; accounts are never automatically merged by email. Swasthya uses session cookies to keep you signed in and validates your identity before giving access to records. Passwords are handled by Supabase. Existing records from the previous sign-in system are not automatically linked by email.
Notifications: In-app alerts cover uploads from the last 7 days and upcoming confirmed appointments within 24 hours. They refresh while the app is open. These are not SMS, email or emergency reminders.
Privacy, in plain language.
Who can see my medical records?
Your signed-in account can retrieve your records. Other visitors cannot browse them.
Are my uploaded files public?
No. Both previews and downloads go through a server-side ownership check. A file cannot be accessed merely by knowing its record ID.
Does AI diagnose or make decisions?
No. This version does not diagnose, interpret tests or automatically extract clinical details. You enter and review document metadata yourself; a filename can be used as a title.
Are appointments booked with real clinics?
Online appointment requests use the doctors configured by the service owner and remain pending until an authorised administrator confirms them. Swasthya does not automatically integrate with unrelated hospitals. Older personal plans remain separate reminders.
Who can read reviews?
Community reviews remain visible to signed-in visitors, as stated when they are submitted. Your name and private visit notes are not displayed. Never put medical information in a review.
How do I contact the service owner?
Email mishra.harshit1811@gmail.com for account, export, deletion, or privacy questions.