Privacy Policy
Protecting your privacy and securing your health information
DrKhan.ai is the world's first privacy-native AI doctor, built with zero-trust architecture by design. We don't collect personal data, so there's nothing to leak, breach, or compromise. This Privacy Policy explains our revolutionary approach to privacy and how we protect your health information without collecting it.
Information We Collect
DrKhan.ai operates on a fundamental principle: we don't collect personal information. Here's what this means:
Zero Personal Data Collection
We do not collect names, email addresses, phone numbers, or any personally identifiable information (PII). No signup, no registration, no data storage. Your consultations are completely anonymous.
No Usage Tracking
We do not track your interactions, page visits, or browsing behavior. No analytics, no cookies, no session data tied to your identity. Each consultation is ephemeral and disappears after completion.
No Device Fingerprinting
We do not collect device information, IP addresses, or any technical identifiers that could be used to identify you. Your device remains anonymous to our systems.
No Health Data Storage
Your health questions and our AI responses are processed in real-time and immediately discarded. We do not store your medical queries, symptoms, or any health-related information.
How We Use Your Information
Since we don't collect personal information, here's how DrKhan.ai operates:
Real-time AI Processing
Your health questions are processed by our AI doctor in real-time using our curated health dataset of 6,420+ medical documents. Responses are generated and delivered without any data storage.
Ephemeral Sessions
Each consultation creates a temporary, anonymous session that expires immediately after the conversation ends. No session data is retained or linked to your identity.
Zero Communication
Since we don't collect contact information, we cannot and do not send emails, notifications, or any communications. Your privacy is protected by our inability to contact you.
No Research or Analysis
We do not analyze user behavior, conduct research, or use your data for any purpose because we don't collect any data in the first place.
Data Sharing and Disclosure
Since we don't collect personal information, there's nothing to share:
No Data to Share
We cannot share personal information because we don't collect it. There are no databases, user profiles, or personal records to share with anyone.
Third-Party Services Transparency
We utilize essential third-party services that may receive minimal technical data: CDN services (for content delivery), AI providers (OpenAI and Groq for processing), and font CDNs. These services receive only technical data (IP address temporarily, no personal identifiers) necessary for service functionality.
AI Provider Processing
Our AI providers (Groq and OpenAI) process your queries anonymously. They receive only the consultation content — no names, emails, or identifying information. See the "Third-Party AI Processing" section below for exactly what is sent, to whom, and under what protections.
No Legal Disclosure
Since we don't collect personal data, there's nothing to disclose to law enforcement or legal authorities. We cannot provide information we don't have.
Third-Party AI Processing
Dr.Khan.ai's answers are generated by third-party AI providers. This section explains exactly what is sent, to whom, why, and what happens to it — and applies to both the website and the iOS app.
What Is Sent
Only the content you actively submit for a consultation: the text of your messages, photos you choose to share for visual diagnosis, images or PDFs of lab reports you upload, and the optional age and sex you may enter to tailor guidance. We do not attach names, email addresses, phone numbers, account identifiers, or advertising identifiers — none exist, because there is no account.
Who It Is Sent To
Groq, Inc. (United States) processes chat, photo, and lab analyses. OpenAI, L.L.C. (United States) is used as a fallback when Groq is unavailable. Transmission is encrypted (HTTPS/TLS) in both cases.
Why It Is Sent and How It Is Used
For one purpose only: to generate the response you asked for. Your content is not used for advertising, profiling, or model training. Under their API terms, both providers are prohibited from using API content to train their models; content may be retained briefly solely for abuse and safety monitoring per each provider's API data policy (for example, OpenAI states up to 30 days), after which it is deleted. We consider these protections equivalent to our own zero-storage standard.
Your Permission
In the iOS app, you are shown this disclosure and asked for your explicit agreement before your first consultation — nothing is sent to any AI provider until you agree. On the website, submitting a consultation constitutes your consent to this processing. You can stop at any time by simply not submitting content; nothing is sent in the background.
Provider Privacy Policies
Groq: groq.com/privacy-policy. OpenAI: openai.com/policies/privacy-policy. Both providers act as processors of the anonymous consultation content only.
Data Security
DrKhan.ai's security is built on the principle of "don't collect, can't leak." By not collecting personal data, we eliminate the primary attack vector for data breaches. Our zero-trust architecture means there's no data to steal, no databases to hack, and no personal information to compromise. This is the most secure approach possible.
Your Rights
Since we don't collect personal data, traditional privacy rights don't apply. Instead, you have these fundamental protections:
Complete Anonymity
You can use DrKhan.ai without revealing any personal information. No name, no email, no phone number required.
No Data Collection
We cannot collect your data even if we wanted to. Our architecture prevents data collection by design.
No Tracking
We cannot track you across sessions or build profiles because we don't collect identifying information.
Data Confirmation Rights
Even though we collect nothing, you can request confirmation that we hold no personal data about you at privacy@drkhan.ai. We will respond confirming our zero-data architecture.
No Communications
We cannot contact you because we don't have your contact information. No spam, no marketing, no unwanted communications.
Your privacy is protected by our inability to collect, store, or use your personal information.
Children's Privacy
DrKhan.ai maintains strict age requirements for appropriate medical consultation: **Age Requirement**: Our service is intended for users 18 years of age and older. Users under 18 should consult with parents/guardians and healthcare professionals for medical advice. **Privacy Protection**: While we don't collect personal information from anyone regardless of age, we recommend parental supervision for any medical consultations involving minors. **Compliance**: This age restriction ensures compliance with medical advice regulations and provides appropriate safeguards for healthcare information.
International Data Transfers
DrKhan.ai complies with all international privacy laws (GDPR, CCPA, PDPL, etc.) by design, not by compliance. Since we don't collect personal data, we automatically meet the strictest privacy requirements worldwide.
Changes to Policy
We may update this Privacy Policy to reflect our continued commitment to privacy-first design. Any changes will be posted on this page. Since we don't collect contact information, we cannot notify you of changes directly.
Contact Us
If you have questions about our privacy-first approach, you can contact us through our website. Remember, we don't collect your contact information, so any communication you initiate will be anonymous.
Privacy Contact Information
For any privacy-related questions or to request confirmation that we hold no personal data about you:
Email: privacy@drkhan.ai
We will respond within 48 hours confirming our zero-data architecture and privacy practices.