Privacy Policy

Who we are

KdahAI is a product of id2r (id2r.app), an AI automation company. This Privacy Policy describes how KdahAI collects, uses, and protects information when you use our Telegram-based medical documentation assistant.

For privacy inquiries, contact us at: privacy@id2r.app

What data we collect

When you sign up for early access, we collect:

• Full name and professional title
• Hospital or clinic affiliation
• Email address
• Telegram username

When you use the KdahAI Telegram bot, the following is processed:

• Photos and text messages you send to the bot (processed in real time, not permanently stored)
• Basic usage metadata (e.g., timestamp, message type — no patient identifiers)

How we use your data

• To set up and manage your KdahAI bot access
• To send you service-related communications (e.g., trial reminders, billing)
• To monitor aggregate usage for service reliability and improvement

We do not use patient data for AI model training. Photos and messages sent to the bot are processed to generate a response and are not retained beyond what is technically necessary to complete the transaction.

Data minimization and retention

We are committed to minimizing data retention. Specifically:

• Photos sent to the bot are not stored after the response is returned
• Message content is not logged in identifiable form
• Sign-up information (name, hospital, email, Telegram) is retained for as long as you are an active subscriber and for a reasonable period thereafter for billing and compliance purposes
• Usage metadata (non-identifiable) may be retained for up to 90 days for service monitoring

Third-party processors

KdahAI uses the following third-party services to operate:

• OpenAI — AI inference (image and text processing). Subject to OpenAI's API data usage policies.
• Telegram — Message delivery platform. Subject to Telegram's privacy policy.
• Google Workspace — Lead data storage via Google Sheets. Subject to Google's data processing terms.
• Vercel — Website hosting. Subject to Vercel's privacy policy.

We select processors that commit to data security standards appropriate for healthcare-adjacent workloads.

Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent and cancel your subscription at any time

To exercise any of these rights, email privacy@id2r.app.

Security

We implement reasonable technical and organizational measures to protect the data we handle. This includes HTTPS encryption for all data in transit, access controls on our internal systems, and the use of reputable cloud infrastructure providers. No system is perfectly secure, and we encourage you to exercise professional judgment when sharing any sensitive information.

Changes to this policy

We may update this Privacy Policy as our service evolves. Material changes will be communicated via email or through the Telegram bot. Continued use of KdahAI after changes take effect constitutes acceptance of the revised policy.

Contact

Questions about this policy or your data: privacy@id2r.app