Privacy

Last updated: July 21, 2026

TekaDok is an early-access personal inbox for doctors. This page explains what we collect, why, and how we handle it. If something here is unclear, email ryanvincecastillo@gmail.com.

Who this is for

TekaDok is a personal tool — not a hospital system and not an EMR. During early access you should prefer the simulator’s sample data, and follow your institution’s rules before pasting identifiable patient information.

What we collect

Account: email address used to sign in (one-time codes via email).
Inbox content you paste: message text and structured fields you confirm (patient labels, rooms, vitals you approve). You control what enters the product.
Technical: basic app logs needed to run auth, prevent abuse, and fix errors (e.g. timestamps, approximate region via hosting).

How we use data

To provide your personal inbox and matching workflow.
To send sign-in codes and essential service messages.
To keep the service secure and reliable.

We do not sell your personal data. We do not use inbox content to train public models.

AI processing

Message text (and screenshots, if you upload one) is sent to Groq, Inc. (United States), our AI inference provider, solely to extract structured fields for your review. Groq processes this data transiently to generate the extraction and, per its terms, does not use API data to train models. Output is a draft until you confirm. TekaDok never diagnoses, triages, or recommends treatment.

Storage & security

Data is stored with our cloud provider (Supabase) with encryption in transit and at rest. Access to your rows is scoped to your signed-in account. No method of transmission or storage is perfectly secure — early access means we are still hardening processes.

Processors & international transfers

We share data only with the processors needed to run the product, under contractual obligations to protect it — or if required by law. Current processors:

Supabase — database, authentication, and function hosting (data stored in the Singapore region).
Vercel — web application hosting and delivery.
Groq — AI extraction of the messages you submit (processed in the United States, not retained for training).

Because these providers operate outside the Philippines, data you submit is transferred internationally. We choose providers that offer encryption and contractual data-protection commitments consistent with the Data Privacy Act of 2012 (RA 10173).

Your rights (Data Privacy Act of 2012)

Under RA 10173 you have the right to be informed, to access, to correct, to object, to erasure or blocking, to data portability, and to damages. To exercise any of these, email ryanvincecastillo@gmail.com and we will respond within the periods the law provides. You may also lodge a complaint with the National Privacy Commission (privacy.gov.ph).

A reminder that goes both ways: patient information you paste belongs to your patients. Follow your institution’s policies and obtain the consents your role requires before entering identifiable patient data.

Retention & deletion

You can ask us to delete your account and associated inbox data by emailing ryanvincecastillo@gmail.com. We will remove or anonymize personal data unless we must keep a limited record for security or legal reasons.

Children

TekaDok is for clinicians, not for children under 18.

Changes

We may update this policy as early access evolves. Material changes will be reflected by the “Last updated” date on this page.