Medical Assistant for Windows · All documents · Русская версия
Privacy Policy
1. General provisions
1.1. This Policy defines how personal data of users of the Medical Assistant for Windows app (the "Software") and of the pages myneurodoctor.ai/ (the "Site") is processed and protected by Neurosfera LLC (OOO «Нейросфера»), INN 5005077648, OGRN 1255000033837, registered address: 140200, Russia, Moscow Region, Voskresensk, Oktyabrskaya St., 13, bldg. 3, apt. 29 (the "Operator").
1.2. Personal data is processed in accordance with Federal Law of the Russian Federation No. 152-FZ "On Personal Data" and other applicable legislation. This document is a translation; in case of discrepancy the Russian-language policy at /legal/privacy.html (Federal Law No. 152-FZ) applies.
1.3. This Policy covers all data the Operator receives through the Site and the Software's server component. The policy of the online service at myneurodoctor.ai is published separately.
2. Core principle: patient data stays on the user's computer
Patient and family member cards, uploaded documents and lab reports, visit notes, consultation history, the doctor's profile and reminders are stored only on the user's computer in an encrypted database (SQLCipher; the key is protected by Windows DPAPI). This data is not transferred to or stored on the Operator's servers. For this data the user (for example, a doctor or a clinic) is the data controller.
2.1. Before text is sent to the neural module, the Software replaces personal data (names in all grammatical forms, dates of birth, phone numbers, e-mail addresses, insurance and ID numbers, addresses) with placeholders such as [PATIENT_1] and shows the result in the "Check the data before sending" window. If a phone or insurance number is detected in the text, sending is blocked. Placeholders are swapped back on the user's computer.
2.2. The server component forwards the de-identified text to the neural module compute provider — DeepSeek (People's Republic of China), whose servers are located outside the Russian Federation — and returns the answer to the user without storing or logging request or response texts. The de-identified text contains no names, dates of birth, contacts or document numbers; the table that maps placeholders back to real values is kept only on the user's computer, so neither the Operator nor the provider can identify the patient from it.
3. Data the Operator processes
| Data | Source | Purpose and legal basis | Retention |
|---|---|---|---|
| Buyer's e-mail address | Purchase form on the Site or in the Software | Sending the receipt, issuing and reissuing the licence key, support, refunds — performance of the agreement | Licence term plus 5 years (accounting requirements) |
| Payment data: payment service identifier, amount, status, date, plan and period | Payment service | Payment accounting, licence issue, refunds — performance of the agreement. The Operator does not receive or store bank card data | 5 years |
| Technical device fingerprint (a hash of computer characteristics with no personal data) and device name if entered by the user | Software at activation | Tying the licence to a computer, limiting the number of devices, issuing the free plan — performance of the agreement | Licence term plus 1 year |
| Request metadata: time, task type, token volume, estimated cost, engine code. No request or response texts, no images | Server component | Plan limit accounting, abuse prevention, load statistics — performance of the agreement and legitimate interest | 13 months |
| IP address as an irreversible hash (HMAC) | Server component | Limiting free activations and request rate — legitimate interest (service protection) | 2 days |
| Support requests (e-mail, message text) | Responding to the request — performance of the agreement, consent | 3 years | |
| Site cookies and localStorage | User's browser | See section 7 | See section 7 |
3.1. The Operator does not collect the buyer's name, phone or other identifiers beyond the e-mail address. No registration or account is required to use the Software.
3.2. The Operator does not process special categories of personal data (health data) of the user's patients or family members: such data stays on the user's computer (section 2). The exception is document images sent for recognition with the user's consent (section 4).
4. Document image recognition
4.1. Scans and photos of medical documents cannot be de-identified before recognition. Therefore page images are forwarded through the server component to the neural module compute provider only after the user's separate consent for each batch of images.
4.2. Images are sent without the file name and without patient card details, are processed in transit and are not stored on the Operator's servers. The user can black out unneeded areas before sending.
4.3. The neural module compute provider is located in the People's Republic of China, a state included in the list of foreign states providing adequate protection of personal data subjects' rights approved by Roskomnadzor (Order No. 128 of 5 August 2022). Sending images is a cross-border transfer of personal data (Article 12 of Federal Law No. 152-FZ) and is carried out on the basis of the user's separate consent; the Operator notifies Roskomnadzor of the cross-border transfer in the established procedure. A user sending images containing third parties' personal data (patients) confirms that they have a lawful basis for such transfer.
5. Storage and protection
5.1. The server component is hosted by a hosting provider in the Russian Federation. The Operator's databases containing buyers' personal data are located in the Russian Federation. Traffic does not pass through foreign content delivery networks.
5.2. Data between the Software, the Site and the server component is transmitted over HTTPS/TLS. Licence keys and tokens are stored only as hashes; access keys to compute providers are stored encrypted.
5.3. Access to personal data is restricted to the Operator's authorised personnel. Administrator actions in the licence management system are logged.
5.4. The Operator applies organisational and technical measures appropriate to the risk.
6. Transfers to third parties
6.1. Payment service (YooKassa, Russia) — payment processing and receipts; receives the e-mail address and payment amount.
6.2. Hosting provider (Russia) — hosting of the server component; no access to database contents within the service.
6.3. Neural module compute provider (DeepSeek, People's Republic of China) — receives de-identified request text and, with the user's consent, document images (section 4). The buyer's personal data (e-mail, payment data) is not shared with the provider.
6.4. Yandex LLC — Site visit analytics, only after the user's consent (section 7).
6.5. Personal data is not shared with other third parties except as required by law.
7. Cookies and local storage on the Site
7.1. The Site uses cookies and similar technologies (localStorage) in two categories:
7.1.1. Strictly necessary — required for the Site to function: the user's cookie choice, the selected theme and the data of a placed order (order identifier and status token) that lets the page show the licence key after payment. This data is kept only in the user's browser, for no more than 7 days (order data) or until the user changes the choice, and does not require consent.
7.1.2. Analytics — Yandex.Metrica (counter ID 108914550, including Webvisor session recordings, click maps and link tracking). Used for anonymous traffic and behaviour analysis. Data is processed by Yandex LLC in accordance with its privacy policy. The user's IP address is anonymised on the Yandex side. Webvisor recordings are anonymised: form fields and other sensitive data are not transmitted.
7.2. Analytics cookies are loaded only after the user gives explicit consent in the cookie banner. The user may withdraw consent at any time via "Cookie settings" in the Site footer or on the Cookie Policy page — analytics will stop loading on subsequent visits.
7.3. The user may also disable cookies in browser settings, but then the Site will not be able to show the licence key after payment; in that case the licence should be bought from the Software.
7.4. The Operator does not transfer cookie or analytics data to advertising networks or other third parties beyond the analytics provider in clause 7.1.2.
8. User rights
8.1. The user has the right to obtain information about the processing of their personal data, to request rectification, restriction or erasure, to withdraw consent and to lodge a complaint with a supervisory authority or a court.
8.2. To exercise these rights, write to info@myneurodoctor.ai from the e-mail address used for payment. The response period is 10 business days. Erasure of the e-mail address before the end of statutory accounting retention periods may be restricted; in that case the data is blocked.
8.3. Patient and family data stored on the user's computer is deleted by the user with the Software's tools or by uninstalling the Software.
9. Changes to this Policy
9.1. The Operator may change this Policy. The current version is published at myneurodoctor.ai/legal/en/privacy.html with the version date.
9.2. Continued use of the Site and the Software after a new version is published constitutes agreement with it.
10. Operator contacts
Neurosfera LLC (OOO «Нейросфера»), INN 5005077648, OGRN 1255000033837
140200, Russia, Moscow Region, Voskresensk, Oktyabrskaya St., 13, bldg. 3, apt. 29
E-mail: info@myneurodoctor.ai, phone: +7 (995) 156-70-74