Privacy Policy
Effective date: September 15, 2026
AskCardio is operated by Ahmed Abuelenein. This policy explains how information is handled when you use the AskCardio iOS application and its supporting service.
Summary
AskCardio does not require an account and does not use advertising, tracking, or analytics. AskCardio does not sell personal information. The app is designed for non-identifying educational cardiology questions. Do not enter a patient's name, date of birth, medical-record number, address, or other identifying information.
To produce an answer, the text you submit and recent messages from the current in-app session are transmitted through AskCardio's Cloudflare Worker to the OpenAI API.
Information processed
- Questions and measurements: text you submit and recent context needed to answer it.
- Generated answers: responses returned by OpenAI through Cloudflare.
- Network and security data: Cloudflare processes standard request data, including IP address, to deliver and protect the service and apply short-term rate limits.
- Optional dictation: if enabled, Apple may process audio to create a transcription. Typing remains available without microphone or Speech Recognition permission.
- Reference websites: opening ASE, ACC, ASNC, PubMed, or another cited page sends a normal web request to that site under its privacy policy.
AskCardio does not request account credentials, contacts, precise location, HealthKit data, advertising identifiers, or payment information.
Use of information
Information is processed to provide requested educational answers, retrieve supporting material from approved sources, protect the service, diagnose failures, prevent abuse, and provide optional speech-to-text. AskCardio does not use submitted content for advertising or user profiles.
Service providers
AskCardio uses Cloudflare for request delivery and security, OpenAI for responses and approved-source search, and Apple for optional Speech Recognition and app distribution. These providers process information under their terms and privacy policies.
OpenAI states API data is not used to train its models by default unless the customer opts in. AskCardio uses store: false and does not create stored OpenAI conversation objects. OpenAI may retain API content in abuse-monitoring logs for up to 30 days by default unless another approved control applies or longer retention is legally required. OpenAI web search is not represented as HIPAA eligible. Do not submit protected health information or identifying patient information.
Storage and retention
AskCardio has no user accounts or conversation database. Recent messages remain in app memory for the current chat and are not saved as persistent history by AskCardio. The Cloudflare Worker does not store conversation content in a database. Providers may retain limited content or technical records under their policies, security requirements, and legal obligations.
Your choices
- Do not submit identifying or protected health information.
- Type instead of using dictation if you do not want Apple to process audio.
- Leave the chat to discard the current conversation from app memory.
- Do not open a reference link if you do not want to connect to that site.
Security
AskCardio uses encrypted HTTPS connections. The OpenAI API key is an encrypted Cloudflare secret and is not included in the iOS app. No transmission or processing method can be guaranteed completely secure.
Children
AskCardio is intended for adults and qualified healthcare professionals and is not directed to children under 13. Do not submit personal information about a child.
International processing
Service providers and reference websites may process information in other countries, subject to their terms, policies, and applicable safeguards.
Changes
This policy may change when the app, providers, or legal requirements change. The effective date will be revised for material updates.
Contact
Privacy questions: ahmed.fathi.m@gmail.com