Privacy Policy
Last updated
Who we are
Aiutante (“the app”) is provided by ТОО «Elmis», 60 Karima Sutyusheva St., office 704, Petropavlovsk, Kazakhstan. For questions about this policy or about your data, write to privacy@aiutante.kz.
What Aiutante is for
Aiutante helps a family, their caregivers and a doctor coordinate the care of one person — the patient. To do that, the app stores information about the patient and about the people caring for them.
Aiutante is not a medical device. It does not provide medical advice, diagnosis or treatment.
What we collect, and why
Your account
Your name, phone number, email address and postal address, so that the people in your care circle can recognise and contact you. Sign-in is handled by our identity provider (Keycloak); we never see your password.
Information about the patient
Name, date of birth, gender, relation to you, address, attending doctor and diagnosis, as entered by you or another member of the care circle.
Care and health information
The daily plan and its results: medication, treatments, measurements (for example blood pressure, blood glucose, temperature), tasks, answers to check-in questions including how the patient is feeling, notes, and medical documents you upload such as prescriptions, discharge summaries and test results. All of it is entered by people, not inferred by us.
Photos and audio
Pictures you attach to reminders, notes, documents or a profile, and voice messages you record. The camera, photo library and microphone are only accessed when you choose to add something.
Contacts
When you pick an emergency contact for the patient from your address book, we store that contact's name and number. We do not read your address book at any other time.
Location
If — and only if — location tracking is switched on for a patient, we store their location, their home address, whether they are within the allowed distance from it, and a location history for the number of days configured in the app. The setting is off by default, is enabled per patient, and requires the patient's consent. It can be switched off at any time, and the history stops being collected. The app itself only reads your device's location while it is open, to show you the map.
Device and technical data
A push-notification token so reminders can reach your device, and crash and performance reports from our self-hosted Sentry instance. Crash reports are not linked to your identity.
What we never do
We do not sell your data. We do not share it with data brokers. There is no advertising in the app and no advertising or tracking SDKs. We do not use your care data to train models.
Who can see your data
Only the people connected to the patient's care circle: the family members, caregivers and the attending doctor who have been given access in the app, plus the staff at ТОО «Elmis» who need it to operate and support the service. An item marked “for caregiver only” is hidden from the patient's own view.
Our service providers process data on our behalf under contract: our hosting provider in Kazakhstan, Google Firebase Cloud Messaging (push notifications) and our self-hosted Sentry (crash reports).
If you connect an AI assistant yourself, that assistant's provider (Anthropic, in Claude's case) processes whatever you ask it to fetch. This is off by default, only you can turn it on, and removing the connector in your assistant ends it at any time. What happens to the data on their side is governed by that provider's terms, not ours.
Legal basis (GDPR, where it applies)
Health data is a special category of personal data. We process it on the basis of your explicit consent, given when you create a patient and invite others to their care circle, and — for account and security data — on the basis of our contract with you and our legitimate interest in keeping the service safe. You may withdraw consent at any time by deleting the patient or your account.
How long we keep it
Care records are kept while the account exists, and for 90 days after deletion in backups, after which they are erased. Crash reports are kept for 90 days.
Your rights
You can see and correct your information in the app. You can delete your account and its data yourself: Settings → Delete account. You may also ask us to export or erase your data, or to restrict processing, by writing to privacy@aiutante.kz; we answer within 30 days. If you are in the EEA or the UK you may complain to your data-protection authority.
Children
Aiutante is for adults coordinating care. We do not knowingly create accounts for children under 16 as users of the app. A patient's information may be entered by an adult responsible for them.
Security
Traffic between the app and our servers uses TLS. Access tokens are held in the device keychain. Access to care data is restricted to the patient's care circle and to authorised staff.
Changes
If we change this policy we will update the date at the top of this page and, for significant changes, tell you in the app.
Contact
ТОО «Elmis» — 60 Karima Sutyusheva St., office 704, Petropavlovsk, Kazakhstan — privacy@aiutante.kz