Legal
Last updated: 27 October 2026
Health information is sensitive. Review what you choose to share and your deletion options below. See also our Terms and Conditions.
DocAI.live operates under the name Beehive Labs LTD. ("DocAI", "we", "us"). This notice explains how we handle personal information when you use the website, account, chat, saved health context, optional photos and subscription features. Contact contact@docai.live about privacy or your data. Third-party websites and services have their own notices.
Account and support information: account identifier, name and email from Auth0 sign-in, account activity, support correspondence and feedback. Usage and billing information includes plan, daily usage, subscription status, payment-provider/customer references, transaction records and, for MCRT payments, wallet addresses and blockchain transaction references. Stripe or PayPal handles payment credentials under its own policies; do not send us full card details.
Health content: messages and chat history, health information you enter, uploaded reports and extracted text, AI summaries, saved medical entries and, if you use the relevant sync features, health measurements, workout and sleep records. These can include sensitive health information. Saved health context can be used in later conversations; an AI-generated record is not a clinician-verified medical record.
Optional profile photos: if you choose Analyse & save and give the separate consent, we store a resized copy of your iris/eye, stool or personal photo, your note, the date and AI observations in your private account. We remove embedded metadata such as GPS before storing and analysing these profile photos. This does not remove identifiers visible in the image itself. These are not public profile pictures.
Technical information: browsers and service infrastructure process information such as IP address, browser/device details, request timestamps, diagnostic information, session cookies and preference storage. Optional analytics and advertising trackers are currently disabled on the DocAI website; see the cookie section below for earlier visits and third-party services.
We use information to sign you in; deliver requested AI responses and photo observations; maintain chat and health context; apply usage limits; manage subscriptions and payments; answer support requests; prevent abuse and protect the service; diagnose faults; and meet legal, accounting and dispute-resolution obligations.
Where applicable data-protection law requires a legal basis, the relevant bases include performance of our agreement for requested account and service functions, legal obligations for required records, and legitimate interests in service security and administration subject to your rights. Optional analytics and advertising trackers are currently disabled; any future optional tracking will require the applicable notice and consent or other lawful choice before activation. Processing sensitive health information may require a separate condition, including explicit consent where applicable. The optional photo feature asks for consent before analysis and storage. This notice and acceptance of the Terms are not a substitute for any separate consent required by law.
Photo uploads are optional. Their resized image and note are sent to the configured AI service for analysis; their saved text observations and notes can be included in future chats. The feature provides descriptions and general information, not disease diagnosis, iridology, biometric identification or authentication.
Chat uploads and reports may be processed differently from profile photos: extracted text, summaries and information you discuss can be saved in conversations or health context. Do not assume that uploading in chat creates a saved profile photo, or that deleting a profile photo deletes every related record.
Upload only information you are authorized to share. Avoid unnecessary names, identity numbers, intimate images and information about other people. If you do not want a particular image or health detail processed by AI providers, do not submit it.
AI processing: questions, relevant conversation and saved health context, and images when needed are processed using OpenAI models, either directly or through OpenRouter depending on the service configuration. Optional photo analysis sends the resized photo and note. Providers may process and retain data under their applicable service terms and retention policies. We do not promise zero provider retention, deletion from all provider systems on a profile deletion, or a universal training opt-out.
Account, infrastructure and payments: Auth0 supports authentication; hosting and database services support operation and storage; Stripe and PayPal process payments where enabled. Providers receive information needed for the functions they perform. Support personnel or authorized service operators may access relevant information when necessary to resolve an issue, maintain security or meet a legal obligation.
We may disclose information when legally required, to address fraud or serious safety/security risks, to establish or defend legal claims, or in a lawful business transfer with appropriate protections and required notice. Private account photos are not publicly displayed. Earlier analytics and advertising collection is described separately below; disabling trackers does not undo a previous disclosure.
Essential cookies and similar storage support sign-in, service operation and preferences. Optional Google Analytics, Google Ads, Meta Pixel and MagicAds advertising scripts are currently disabled on the DocAI website. The Cookie preferences panel in the footer explains the current position. Browser settings can clear stored data, although blocking essential cookies may prevent sign-in.
Earlier website versions loaded Google Analytics, Google Ads and Meta after cookie choices permitted them; the homepage also loaded a separate MagicAds advertising script. Providers could receive browser/network identifiers and page information under their own policies, including URLs and page titles sent by analytics. If you still have an earlier version open, fully reload or close it to stop scripts that were already loaded. Disabling new loading does not erase earlier provider records or cookies.
External authentication, payment and linked websites operate separately and may use their own cookies under their own notices. Contact contact@docai.live about earlier collection, deletion requests or any applicable right to opt out of sale, sharing or targeted advertising. We will review any future tracking before enabling it and provide the choices required by applicable law.
Chat history, saved health context and optional profile photos persist in your account for continuity until removed through the relevant controls or an applicable deletion request, subject to legitimate retention needs. There is no automatic expiry period promised for saved health content. Keep your own originals; we are not a medical-record backup service.
Retention depends on the purpose and data category. Billing and transaction records may need to remain for tax, accounting, fraud prevention or legal claims. Logs, backups and provider-held copies may have separate retention and deletion cycles. We do not guarantee immediate erasure from every backup or third party. Contact us for the retention details relevant to your request; any legally required retention will be explained where permitted.
Delete an optional photo through the profile photo controls to remove its stored image and saved observations and stop adding them as profile context to later chats. An already-running response and earlier chat messages may still contain information discussed before deletion. Separately stored medical entries and extracted report information are separate records. Use available controls or ask us to remove those too.
The wearable-data deletion feature removes synced health measurements, workouts and sleep records; it does not delete your whole account, conversations, documents or other saved health context. Custom wearable AI-sharing preferences are not currently available: relevant synced data may be used as AI context while you keep it in the service.
Contact contact@docai.live to request account-data deletion or help withdrawing consent or removing other records. Withdrawal does not affect processing already lawfully carried out. Removing information needed for a requested feature can prevent that feature from working. A data-deletion request does not itself cancel a Stripe or PayPal recurring payment; also use the cancellation route described in the Terms.
Depending on your location and applicable law, you may have rights to access or receive a copy of information; correct inaccuracies; delete data; receive portable data; restrict or object to processing; withdraw consent; opt out of sale, sharing or targeted advertising; and complain to a competent privacy authority. Some laws provide appeal rights if a request is denied. We do not use AI outputs to make legally binding eligibility decisions about you.
Send requests to contact@docai.live and identify the account and the right you want to exercise. We may need proportionate identity verification or proof of an authorized agent's authority before disclosing or changing sensitive data. Do not send passwords or full identity documents unless we arrange a necessary, appropriate verification method. We will respond within the time required by applicable law and explain any lawful limitation or denial, including available appeal options. You will not be penalized for exercising rights protected by law.
We use safeguards including authenticated account access and ownership checks for private profile photos. No online service can guarantee absolute security. Keep your login secure and avoid submitting information unnecessary for your request. We do not represent that the service is HIPAA-certified, a regulated medical-record system, or suitable for clinical processing without a separate assessment and any required agreement.
Our infrastructure and third-party providers may process information outside your country, where privacy laws may differ. Where applicable law requires safeguards for an international transfer, those requirements must be met. Contact us for information about the locations and transfer arrangements relevant to your data.
DocAI is intended for adults aged 18 and over. Do not create an account or submit photos or personal information about a minor. If you believe a minor has supplied personal information, contact us so we can investigate and take appropriate action. This policy is an age restriction, not a claim that we verify every user's age.
We may update this notice as features, providers or legal requirements change. The revised date appears above. We will provide appropriate notice of material changes and obtain fresh consent where required by law before using information for a new purpose that requires it.
Beehive Labs LTD. DocAI.live Privacy and support: contact@docai.live Please use the email associated with your account and describe the request without unnecessary sensitive attachments.