Privacy policy

Tandrustim is a personal health record for adults managing their own papers. You can write to us at info@rawadara.com.

You sign in only with Apple or Google. Tandrustim has no passwords, phone number sign-in or codes.

• Your account: the name and email that Apple or Google share with us when you sign in.
• Your health profile: date of birth, sex, blood type and an emergency contact.
• The papers you scan: the photos.
• The entries you confirm: medicines, allergies, conditions, surgeries, visits and lab values.
• The access log: who looked at your record, and when.
• Your language and appearance settings, as set in the app.

Sealed with AES-256-GCM before it is saved, with a key held by the service: the payload and extraction text of your health profile, of your confirmed entries and of your documents.

Not sealed: your account name and email (from Apple or Google); the fields the service needs to find and sort records (entry type, date and whether it is active); and the access log.

Photos of your papers are kept in a private Cloudflare R2 bucket. They are opened only through links that last 300 seconds, for you or for a doctor with a live link.

Our storage and hosting providers, including Cloudflare R2 for files, hold your data for us. The AI providers that read a page are listed under How AI reads your papers.

• The AI has to see the photo of your paper to read it.
• We send only the photo of the page and fixed reading instructions. We never send your name, email, phone number, account or anything else from your record.
• We tell OpenAI not to store the answer it gives us.
• Google and OpenAI do not use what we send them to train their AI. We use their paid services, and their terms say so.
• They may keep what we send for a limited time to watch for misuse, usually up to 30 days at OpenAI. Their own terms say how long.
• Before a photo is sent, we remove the hidden details stored inside it, such as location and camera.
• We never write your photos or what the AI reads into our logs.
• We do not sell your data or share it with any other company. Only the AI company named on this screen receives a photo, and only to read it.
• The AI reads your papers only after you agree. You can take it back at any time and add everything by hand.

Who reads your papers

• Google (Gemini)
• OpenAI (GPT)

Their computers are in the United States.

What the AI reads is only a suggestion. You check every line before anything is saved to your record.

The AI only suggests what is written on your paper. Ask your doctor about anything medical.

• You share a link, or a QR code on your phone that opens the same link. A doctor opens it in any browser, with no account.
• You choose how long the link lasts: 15, 30, or 60 minutes.
• Access ends by itself, or when you stop it.
• Every time the link is opened, it is written to an access log you can read.

• We do not sell your data.
• We do not show ads.
• We do not put health data in our logs.

• Export your data in the app.
• Delete your account in the app: open the Me screen and choose Delete account. After you confirm, your records and stored images are removed.
• Correct your entries in the app.
• If you cannot open the app, write to info@rawadara.com.

We keep your data until you delete your account.

When this page changes, the date at the top changes.