Privacy Policy

In effect since June 5 · Version 1.0

1. General Provisions

This Privacy Policy (hereinafter — the "Policy") defines the procedure for the collection, storage, processing, and protection of personal and medical data of users of the MedOne AI platform (hereinafter — the "Platform").

Data operator:

Organization: MEDONE AI LLC ("MEDONE AI" MCHJ)
TIN: 313 143 771
Address: 9th quarter (9-massiv), house 17B, Chilanzar district, Tashkent 100115, Republic of Uzbekistan
Contact (privacy matters): info@medone.uz

The Platform respects users' privacy rights and processes personal data in accordance with the Law of the Republic of Uzbekistan "On Personal Data" (dated 02.07.2019, No. ZRU-547) and other applicable legislation.

2. Data Collected

The Platform may collect the following data:

Personal data — full name, date of birth, gender, phone number, address.
Medical data — complaints, diagnoses, laboratory results, prescriptions, diagnostic data, consultation records.
Payment data — transaction history (card details are not stored — see the "Payment Terms" document).
Geolocation — precise device location (only with your permission) — to show nearby clinics and arrange home visits.
Uploaded files — photos and documents you add yourself (avatar, photos of lab results).
Device and technical data — device type, operating system version, IP address, application usage log.

Medical data constitutes a special category of personal data and is processed on the basis of the user's separate consent.

3. Purposes of Data Use

providing medical services and coordinating them;
identifying the user and ensuring security;
processing payments;
improving service quality and providing technical support;
complying with legal requirements.

4. Data Storage and Localization

The personal data of citizens of the Republic of Uzbekistan is stored on servers located within the territory of the Republic of Uzbekistan.
Data is stored for the period necessary for the purposes of its processing, or for the periods established by legislation.
Upon expiry of the storage period, data is deleted or anonymized.

5. Transfer of Data to Third Parties

The Platform transfers data only in the following cases and to the extent necessary:

to partner clinics, doctors, and laboratories providing medical services — to perform the service;
to certified payment providers — to process payment;
to providers of artificial intelligence services — within the scope defined by the "AI Usage Terms";
to authorized state bodies — where there is a legal basis.

Data is not sold to third parties for commercial purposes.

6. Data Protection

The Platform applies the following protection measures:

SSL/TLS encryption;
role-based access control (RBAC);
two-factor authentication;
audit logs;
creation of backup copies;
security monitoring systems.

7. Data of Minors

The data of minors is processed on the basis of the consent of a legal representative (parent or guardian).

8. User Rights

The user has the following rights:

to view their data;
to edit it;
to export it;
to request its deletion;
to withdraw the consent given.

To exercise these rights, contact info@medone.uz. Requests are reviewed within the periods established by legislation.

9. Cookies and Tracking Technologies

The web part of the Platform may use cookies and similar technologies in order to improve the user experience.

10. Changes to the Policy

The Platform reserves the right to make changes to this Policy. Users will be notified of material changes via the Platform.

11. Contact

For questions related to privacy: info@medone.uz.