Privacy policy

Privacy Policy — DIAG AI

Last updated: May 2026

DIAG AI ("we", "our", "us") is a clinical intelligence platform that integrates with diagnostic laboratories and healthcare providers in India to deliver AI-powered blood report summaries and patient follow-up communications via WhatsApp. This Privacy Policy explains how we collect, use, store, and protect personal data, including health data, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

Who This Applies To

This Policy applies to patients whose blood test data is processed through DIAG AI via their diagnostic lab or doctor, to lab staff and clinic users who access our platform, and to visitors of this website.

What Data We Collect

We collect patient name, age, gender, and mobile number as provided by the diagnostic lab or clinic at the time of sample collection. We collect blood test results, biomarker values, and reference ranges received from the lab's systems. We collect WhatsApp message delivery, read, and reply status to track communication outcomes. We collect basic technical data such as IP address and browser type for security purposes when you visit our website.

How We Use Your Data

We use this data to generate AI-powered plain-language summaries of blood test reports, to deliver these summaries and follow-up reminders to patients via WhatsApp, to send critical value alerts to referring doctors with a confirmation receipt, and to create compliance audit trails for our lab partners. We do not use patient health data for advertising or marketing purposes of any kind.

Legal Basis for Processing

We process patient health data based on explicit consent collected by our lab and clinic partners at the time of sample collection, in accordance with Section 6 of the DPDP Act, 2023. Patients may withdraw this consent at any time.

Data Sharing

We share data only with the diagnostic lab or doctor who ordered the test, with Meta's WhatsApp Business API for message delivery, and with our cloud infrastructure provider for secure storage within India. We do not sell, rent, or share personal data with any third party for marketing purposes.

Data Retention

Patient health data is retained for the duration of our agreement with the relevant lab or clinic plus three years thereafter, unless deletion is requested earlier. Critical value communication logs are retained for seven years to support regulatory compliance.

Your Rights

You have the right to access a summary of your data, request correction of inaccurate data, request deletion of your data, and withdraw consent at any time by replying STOP to any WhatsApp message from us. You may also file a complaint with the Data Protection Board of India.

Data Security

All data is encrypted in transit and at rest, stored on servers located in India, and access is restricted to authorised personnel only.

Contact Us

For any privacy-related questions or requests, contact us at meetdiagai@gmail.com

DIAG AI phulera, Jaipur, Rajasthan, India.