Legal

Privacy Policy

Last updated 16 September 2026 · iKiguy AI

iKiguy AI (“iKiguy”, “we”, “us”) builds an AI-assisted medical documentation tool. Doctors speak naturally with their patients and iKi drafts a structured medical report for the doctor to review and sign. This policy explains what we collect, where it lives, who else touches it, and what you can ask us to do with it.

The short version

We process two kinds of data: details doctors give us when they sign up, and the consultation content iKi turns into a report. Consultation data belongs to the doctor and their patient, not to us. We do not sell it, and we do not use it to train AI models. It is encrypted in transit and at rest, both in the cloud and on the doctor’s device.

If you connect Apple Health, we read only the metrics you authorise, use them solely to show you insights and trends, and never for advertising or marketing. You can disconnect at any time.

1. Who we are

iKiguy AI is the data controller for the information described in this policy. You can reach us at hello@ikiguy.xyz for any privacy question.

Where a doctor or clinic uses iKi to document their own patients’ care, that doctor or clinic is the controller of the patient data, and iKiguy acts as a processor on their instructions.

2. What we collect

Information doctors give us

When you request beta access we collect your name, specialty, clinic or hospital, city and country, work email address, and optionally your typical number of consultations per day. If you arrived through another doctor’s referral link we record the referral code that brought you.

Consultation content

When a doctor uses iKi in a consultation we process the spoken audio of that consultation, the text transcribed from it, and any lab reports, imaging, or documents the doctor supplies. From these iKi drafts a structured medical report. This content commonly includes health information about an identifiable patient.

Account and usage data

Basic technical information needed to run the service: authentication records, timestamps, device and app version, and error diagnostics.

Website analytics

On this website we use a product analytics tool to understand which pages people visit and where they drop out of the signup form. It records page views, the referral code a visitor arrived with, and anonymous events such as a form being submitted. It does not record what you type, and we do not run session replay. Analytics data is stored in your browser’s local storage rather than in a cookie, and we honour the Do Not Track setting if your browser sends it.

3. Why we process it

To provide the service. Transcribing consultations, drafting reports, and returning them to the doctor for review and signature.
To assess beta applications and send invitations. Signup details are used to review your application and contact you about the beta. Nothing else.
To operate referrals, attributing a signup to the doctor whose code was used.
To keep the service secure and working, including diagnosing faults and preventing abuse.
To meet legal obligations where a law requires us to retain or disclose information.

Our legal bases, where GDPR applies, are performance of a contract for providing the service, legitimate interests for security and product operation, and consent for beta communications, which you may withdraw at any time. Where we process patient health data we do so as a processor on the instructions of the treating doctor or clinic, who is responsible for establishing the appropriate condition for processing under Article 9.

4. Where your data lives

Data is stored in cloud infrastructure operated on Amazon Web Services (AWS). It is encrypted in transit using TLS and encrypted at rest.

iKiguy is available to doctors internationally, which means data may be processed in a country other than the one you practise in. Where GDPR or the UK GDPR applies, transfers outside the EEA or UK rely on appropriate safeguards, including Standard Contractual Clauses with our infrastructure and processing providers. You can ask us for details of the safeguards in place at hello@ikiguy.xyz.

5. Data on the doctor’s device

iKi is built to work in clinics with unreliable connectivity. When a doctor records a consultation offline, the record is written to a local database on their device and encrypted at rest there.

That local copy persists until it successfully syncs to the cloud. There is no fixed expiry timer, because discarding an unsynced consultation would mean losing a patient record. Once the device regains a connection, iKi syncs the queued records automatically.

What this means in practice

While a record is unsynced it exists only on that one device. If the device is lost, stolen, or damaged before it next connects, that record cannot be recovered from cloud backup. Unsynced consultations are also not visible to colleagues or to any connected clinic system until the sync completes.

We tell you this plainly because it affects how you should work. Doctors and clinics handling patient data offline should keep device encryption and screen locks enabled, and reconnect regularly.

6. Apple Health (HealthKit)

Where you connect Apple Health, the App reads the health metrics you authorise directly from your device through Apple’s HealthKit framework, and syncs their latest values to your iKiguy account solely to provide you with insights and trends. We do not use HealthKit data for advertising or marketing, we do not sell it or share it with data brokers, and we do not disclose it to third parties other than the processors that store your account data, or where required by law. You can revoke iKiguy’s access at any time in the Apple Health app or by disconnecting in iKiguy Settings; disconnecting stops further reading and removes the values we synced.

Connecting Apple Health is optional. iKiguy works without it, and we never read a metric you have not explicitly authorised.

We do not sell your data, and we do not share it for advertising.

We use a small number of third-party providers to run the service. These fall into two categories:

Cloud infrastructure providers, who host and store data.
AI processing providers, who perform speech recognition, translation, and language processing so that iKi can turn a spoken consultation into a structured report. Consultation content is sent to these providers for that purpose.

We use enterprise tiers of these services, under which your content is not used to train their models. Each provider is bound by a data processing agreement limiting them to processing data on our instructions. A current list of our sub-processors is available on request from hello@ikiguy.xyz.

We may also disclose information where we are legally required to, or to establish or defend legal claims.

8. How long we keep it

Beta signup details are kept while your application is open and for as long as you remain in the programme. Ask us and we will delete them.
Consultation content and reports are retained for as long as the doctor or clinic needs them, subject to the medical record retention rules that apply to that practice. When a doctor or clinic ends their relationship with us, we delete or return their data on request.
Unsynced local data lives on the device until it syncs, and is removed from the device when the app is uninstalled.
Diagnostic logs are kept for a limited period for security and troubleshooting.

9. Security

We encrypt data in transit and at rest, restrict internal access to the people who need it, and use infrastructure that isolates each account’s data. No system is perfectly secure, and we will notify affected users and the relevant authority where a breach requires it under applicable law.

10. Your rights and choices

You can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or send it to another provider in a portable format. Write to hello@ikiguy.xyz and we will respond within 30 days. We do not charge for this.

Withdrawing consent

Where we rely on your consent, for beta communications and for connecting Apple Health, you can withdraw it at any time without giving a reason. Unsubscribe links are in every email we send. Apple Health access is revoked in the Apple Health app or by disconnecting in iKiguy Settings, as described in section 6.

Deleting your account

You can delete your iKiguy account and its data from within the App, in Settings, or by writing to hello@ikiguy.xyz. Deleting your account removes your profile, any health values synced from Apple Health, and the consultation records held under your account, except where we are required by law or by medical record retention rules to keep a copy for a defined period. Where a clinic is the controller of patient records, we return or delete that data on the clinic’s instruction.

Complaints

If you think we have handled your data badly, tell us first at hello@ikiguy.xyz and we will try to put it right. You also have the right to complain to the data protection authority in your country. In Singapore that is the Personal Data Protection Commission; in the EEA or UK, your local supervisory authority.

11. Children’s data

iKi is for use by qualified healthcare professionals, not by children. A doctor may record a consultation with a child patient in the course of treating them, and that data is handled as patient data under this policy and under the doctor’s own obligations.

12. Changes to this policy

We will update this page when our practices change and revise the date at the top. If a change materially affects how we handle your data we will tell you directly.

13. Contact us

Privacy questions, requests, and grievances: hello@ikiguy.xyz.

iKiguy AI is based in Singapore, and this policy is governed by the laws of Singapore. This does not affect rights you have under the data protection law of your own country.