Privacy Policy

Last updated: August 17, 2026

Suhika ("Suhika," "we," "us," or "our") provides an AI-assisted care team messaging platform that helps doctors and clinic staff triage, route, and respond to patient messages sent over WhatsApp. This policy explains what information we collect, how we use it, who we share it with, and the choices available to you.

Suhika is used by two kinds of people: doctors and clinic staff, who use a dedicated inbox application to manage patient conversations, and patients, who interact with a clinic entirely over WhatsApp — no separate app or account is required on the patient side.

Human-in-the-loop, always. Every AI-generated response is reviewed by a physician or clinic staff member before it is sent to a patient. No message reaches a patient without human review.

1. Information we collect

From patients (via WhatsApp)

Your WhatsApp phone number and display name.
Messages you send to a clinic's WhatsApp number, including text, images, and documents (for example, prescriptions or lab reports you send in).
Information you or your care team add to your record over time — such as age, gender, diagnoses, prescriptions, and diagnostic reports.

From doctors and clinic staff

Name, email address, and login credentials for the Suhika inbox application.
WhatsApp Business phone numbers connected to your practice.
Professional details such as specialty, clinic address, and hours, where provided.

Generated automatically

Message timestamps and delivery status.
AI-generated classification and priority tags used to route messages (for example, marking a message as routine, needing clinical review, or potentially urgent).
Structured fields extracted from uploaded prescriptions and reports (for example, medication name, dose, and frequency), which remain editable by clinic staff.

2. How we use this information

To deliver and receive WhatsApp messages between patients and their care team.
To classify and prioritize inbound messages so clinically important messages are surfaced promptly.
To generate draft responses grounded in a patient's own prescriptions, diagnoses, and message history — every draft is reviewed by a physician or staff member before sending.
To extract and structure information from uploaded prescriptions and diagnostic reports.
To maintain, secure, debug, and improve the service.
To communicate with clinic staff and doctors about their use of Suhika.

We do not use patient data to generate autonomous medical advice, diagnoses, or treatment decisions. AI assists by drafting and structuring information for a human clinician to review — it does not act on its own.

3. Who we share information with

We share information with a limited set of service providers strictly as needed to operate Suhika. We do not sell personal information.

WhatsApp / Meta Platforms, Inc. — messages are sent and received through the WhatsApp Business Platform, which processes message content and metadata to deliver messages between Suhika and patients.
AI / language model providers (for example, Anthropic and OpenAI) — process message text and uploaded documents to classify messages, draft responses, and extract structured fields from prescriptions and reports.
Cloud hosting and database infrastructure providers — store application data securely on our behalf.
The doctors and clinic staff treating you — physicians and staff associated with your care see your conversation and record so they can respond to you; this is the core function of the service.

We may also disclose information where required by law, to protect the rights and safety of our users, or in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

4. Data retention

We retain patient messages, uploaded documents, and derived clinical records (such as active and historical prescriptions) for as long as needed to support ongoing care and to meet the recordkeeping obligations of the clinics using Suhika. Doctor and staff account information is retained for as long as the account remains active. You can request deletion of your data at any time — see our Data Deletion page for details.

5. Security

We use industry-standard safeguards — including encryption in transit and access controls scoped to the doctors and staff actually treating a given patient — to protect information against unauthorized access, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights and choices

Access and correction. You can ask your clinic or contact us directly to review or correct information in your record.
Deletion. You can request deletion of your data at any time — see our Data Deletion page.
Opt-out of messaging. You can stop messaging a clinic's WhatsApp number, or block the number directly in WhatsApp, at any time.

7. Children's privacy

Suhika is intended for use by adult patients, or by a parent, guardian, or caregiver messaging on behalf of a minor patient under a doctor's care. We do not knowingly collect information directly from children outside of that clinical context.

8. International data transfers

Suhika is operated from India. Some of our service providers, including AI/LLM providers, may process data outside of your country of residence. Where this happens, we take steps to ensure appropriate safeguards are in place.

9. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do, and where changes are material, we will take reasonable steps to notify clinic staff and doctors.

10. Contact us

If you have questions about this policy or how your information is handled, contact us at amit@suhika.ai.