Updated 28 July 2026

DoctorMi privacy policy

DoctorMi collects and processes data to provide the service. We do not sell personal data, use it for advertising or track users across apps or websites.

1. Data controller

ArnoHealth SL, Gran Via de les Corts Catalanes, 699, 2nd floor, door 2, 08013 Barcelona, Spain. Contact: info@onmedic.com.

2. Data we process

• Account and contact data: name, email address, phone number, role and user ID.
• Health and clinical data: allergies, medication, medical history, date of birth, symptoms and information included in consultations.
• User content: consultations, messages, images, documents and administrative information supplied by the user.
• Purchases: product, subscription status and identifiers needed to verify purchases with Apple or Google.
• Device and usage data: installation ID, notification token, platform, read status and interactions required to provide the service.
• Diagnostics: technical errors and de-identified crash data. DoctorMi configures Sentry not to send PII, screenshots or session replays.

3. How we use data

We use this data to create and protect accounts, connect patients with professionals, manage consultations and messages, allow attachments, send notifications, verify subscriptions, provide functional history, prevent abuse and fix technical errors.

4. Legal basis

We process data as necessary to provide the requested or contracted service, comply with legal obligations and protect system security. Health data is processed with explicit consent and/or in the context of healthcare provided by authorised professionals, as applicable.

5. Service providers

We use Supabase for authentication, database and storage; Firebase Cloud Messaging for notifications; Sentry for de-identified technical diagnostics; and Apple or Google for sign-in and purchases. These providers process data under their applicable terms and agreements.

6. Retention and deletion

We retain data while the account is active or as needed to provide the service and meet legal obligations. Users can delete their account from the app. You may also request access, correction, deletion, restriction, objection or portability by emailing info@onmedic.com. See the account deletion steps and retention details.

7. Security and international transfers

We use encryption in transit, access controls, Row Level Security and PII-free logs. Where a provider processes data outside the European Economic Area, appropriate safeguards apply, such as adequacy decisions or Standard Contractual Clauses.

8. Complaints and changes

You may lodge a complaint with the Spanish Data Protection Agency or your local supervisory authority. Material changes to this policy will be published on this page.