Arabic version

Privacy Policy

Last updated: November 8, 2026

This Privacy Policy explains how Hia Medical Translator (“we”) handles your information when you use: our Android app, our website, and our Telegram bot, together with the former WhatsApp bot, which was discontinued in October 2026. By using any part of the service, you agree to this policy and our Terms of Use.

Important: The service is educational language assistance. It is not medical advice, diagnosis, or treatment.

1. Quick summary

• We help you look up and learn medical terms (typing, voice, or optional photos).
• You can use the app without an email address or phone number; we create a simple account tied to your device.
• The free tier is limited (10 searches a day); Full Access is sold through Google Play, or on the website and our Telegram support channel.
• We may store searches and results on our servers to provide and improve the service.
• We may log general feature usage without linking it to your name.
• Search history, favorites, and study lists may stay on your device until you delete them.
• You can delete data in the app or by emailing us — see Delete your data.

This summary does not replace the details below.

2. Information we collect

2.1 Your account

• In the app we create a simple device-linked identifier so you can use features without an email address or phone number.
• We store your subscription status (free or Full Access) with that identifier.
• You may sign in with Google in the app or on the pricing page — we then receive your email address and Google account id, so your subscription stays on your account and works on another device you sign in on. Google’s policies also apply.
• You may link your Telegram account to your Hia account. We process the link so we can see that both accounts belong to the same person; the link is for identity only and does not move access from one product to the other (an app subscription does not unlock the bot, and the reverse).
• If you allow notifications, we store the push token your device receives from Google Firebase Cloud Messaging so we can deliver them. You can turn notifications off in the app or the system settings.

2.2 What you search and send

• Terms you type, speak, or capture in a photo (when you use those features) are sent to our servers to provide explanations, examples, pronunciation, and learning content.
• We may keep requests and results to serve you faster and improve the service.

2.3 Service usage (general statistics)

We may log events such as:

• Term searches (which may include the search text, input method, and app version).
• Feature use (study queue, favorites, pronunciation, and similar).

We do this to improve the service. These events are not tied to your personal name — only to your anonymous app identifier.

On the website we use Google Analytics 4 (loaded through Google Tag Manager) to count visits and button clicks. It stores cookies in your browser; you can block them in your browser settings or with Google’s opt-out browser add-on without losing access to the site.

2.4 Subscriptions and payment

When you subscribe — inside the Android app through Google Play, on the website, or through our Telegram support channel:

• In-app purchase through Google Play: Google processes the payment and we never receive your card details. We receive from Google: the product and plan id, order id, purchase token, subscription state (active / free trial / cancelled / expired / refunded), expiry date, and whether the purchase is a test purchase. We use it to verify the subscription, grant access, and prevent abuse or duplicate grants.
• We keep a purchase ledger linked to your account and purchase token for accounting, anti-replay and dispute/refund handling. It contains no card data.
• Google sign-in data when you sign in (in the app or on the website) to attach the purchase to your account.
• Local transfer on the website (the methods shown at checkout for your country): we receive the order details, the account email you signed in with, and the reference of the transfer so we can match it.
• Digital-currency payment is processed by a payment provider; we do not receive your wallet keys or seed phrase. We keep the transaction reference to activate your subscription after confirmation.
• Payment proof on Telegram: when you pay through our support channel, we process the activation details, the channel, your country (for payment options), and the payment proof you send (text or image) for manual review.
• Trials: we record when a free trial was granted — against the account and the device — to enforce the one-trial rule.
• Temporary access may be granted while a manual payment is confirmed. You can cancel it in Settings. See our Refund Policy for details.

We do not store full bank card numbers on our servers; the website does not take card payments.

2.5 Data on your device

• Search history, cached term results, study queue items, favorites, offline packs, and similar app data stored locally.
• Settings and flags (for example, onboarding and prompt-related preferences).

Local data remains on your device unless it is also synced or otherwise sent to our servers as described in this policy.

2.6 Permissions (Android)

• Microphone: voice input to convert speech into text for term lookup.
• Camera: capturing images for term extraction when you choose this feature.
• Notifications: optional reminders or updates you enable.
• Vibrate: light feedback for certain interactions.

You can deny permissions where the OS allows; some features may not work without them.

2.7 Technical data

When you connect online, general technical information (such as IP address and time) may be logged for security and to run the service.

3. How we use information

• Provide search, explanations, pronunciation, and the learning features of each product.
• Keep your subscription on your account, so a device you sign in on with Google sees it.
• Activate subscriptions, verify payment, and prevent abuse.
• Improve the service and understand general usage.
• If you give us a contact method (Telegram), we use it to send new offers, app news, updates, and other service-related messages. You can edit or remove it any time from your account, without affecting your access to the service.
• Comply with law and respond to valid legal requests.

4. AI processing and pronunciation

We use AI systems on our servers to deliver the educational service:

• DeepSeek — for classifying your queries (understanding intent) and generating educational explanations of medical terminology and concepts, examples, and study-oriented responses, as well as the educational chat mode inside the app, and extracting medical terms from images (image scan). When you search for a term or ask a medical question, your query text is sent from our server to DeepSeek. The app and the bot do not contact AI providers directly.
• OpenAI (GPT models) — for generating medical illustrations, and as a fallback for extracting terms from images when the primary provider is unavailable. When you use these features, the image or the extracted text is sent to OpenAI for processing.
• Groq (Whisper) — for converting voice search into text, with OpenAI as a fallback. Audio recordings are sent for processing and are not retained.
• ElevenLabs (and OpenAI’s speech service where it is configured as the synthesis provider) — for generating educational pronunciation audio. Only the English term name is sent to generate audio. We store audio files to speed up future responses.
• Fish Audio — for generating course lesson audio (such as the Medical Terminology course). Only the English word and example text is sent to generate audio, and we store the audio files to speed up future responses.

Telegram bot: the bot offers an educational conversation experience — term explanations, educational explanations of medical questions and concepts, concept comparisons for learning, batch study terms, contextual follow-up (the bot understands your previous conversation to continue the explanation), English spelling correction, and voice-to-text.

Medical data source: Some core medical definitions are based on MeSH (Medical Subject Headings) from the U.S. National Library of Medicine (NLM/NIH) — a trusted medical database used as a reference source for definitions. MeSH-based content is displayed with the attribution “Courtesy of the U.S. National Library of Medicine.” Content generated entirely by AI (not based on MeSH) is labeled with “AI-generated — may contain errors.”

5. Who we share with

We do not sell your personal information. We share only when needed, such as:

• Supabase — our database, authentication and file-storage provider, which stores your account, searches, subscription state, and generated audio.
• Our hosting provider, which runs the servers and the website on our behalf.
• Google — Google Play (purchases and app distribution), Google sign-in, and Firebase Cloud Messaging (push notifications).
• Telegram — when you use the bot, your messages travel through Telegram.
• The AI providers listed in section 4, only for the requests that need them.
• Payment providers — Google Play for in-app purchases, and the local-transfer or digital-currency provider you choose at checkout.
• Companies that host or secure our service and process data on our behalf.
• When required by law, or to protect users and the service.

6. Telegram (and the former WhatsApp bot)

If you use our Telegram bot — or used our WhatsApp bot before it was discontinued — we may process:

• Your identifier on the platform (your Telegram username or id, or your WhatsApp number if you used the former bot).
• Messages and commands you send to the bot.
• Basic delivery information to avoid duplicates and run the service reliably.
• Your bot subscription status, and the identity link if you connected the bot to your Hia account.

Our WhatsApp bot ran through WhatsApp by Meta and has been discontinued. Your previous use remains subject to WhatsApp policies. See WhatsApp Privacy Policy.

Our Telegram bot runs on Telegram — see Telegram Privacy Policy.

To protect the service, we may monitor abuse patterns (repeated invalid input, automated messages, limit overuse) and apply temporary restrictions or suspension when needed.

7. Retention

We retain server-side data for as long as needed to provide the app and for legitimate business purposes (for example security, analytics aggregation, and legal compliance).

Local data remains on your device until you clear app data, uninstall the app, or delete it inside the app where available.

You can delete data in the app: Settings → Manage My Data — clear specific items or “Delete All My Data & Account” to permanently remove server-side data.

Account deletion is a scheduled process: when you tap “Delete All My Data & Account”, your local data is erased immediately, your premium status is revoked, and your account is scheduled for permanent erasure 90 days later. During this grace period your cloud-stored data (search history, favorites, study queue, chat conversations, and stats) is retained but frozen so you can change your mind. You can cancel at any time by opening the app and signing in, or via the “Cancel deletion” option in Settings → Manage My Data.

Approximately 7 days before the scheduled erasure date, we send a reminder email (from the hiamedicaltranslator.com domain) to users who signed in with an email address, stating the exact date on which all data will be permanently and irreversibly deleted. Users without an email address (guest/anonymous accounts) see this notice in the app instead. After the 90-day period, all associated data — including chat conversations, search history, favorites, study lists, analytics, and the account itself — is permanently deleted and cannot be recovered.

8. How to delete your data

From the app

1. Open the Hia Medical Translator app
2. Go to Settings
3. Tap “Manage My Data”
4. Clear specific data, or tap “Delete All My Data & Account” to remove everything permanently

From the Telegram bot (or the former WhatsApp bot)

1. Email privacy@hiamedicaltranslator.com.
2. Subject: Data deletion request (or WhatsApp Data Deletion Request for WhatsApp).
3. Include the Telegram username you used with the bot, or the WhatsApp number if your request concerns the former bot.
4. We may ask you to confirm ownership before deleting.

After verification, we delete or anonymize eligible records, except where law requires retention.

9. Security

We use appropriate security measures (such as encryption in transit). No method of transmission or storage is 100% secure.

10. Children’s privacy

The service is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children.

11. International users

Your information may be transferred and processed in other countries where our service or partners operate. Data protection laws may differ by country.

12. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing. Contact us at the email below to exercise them.

13. Changes

We may update this policy. We will post the new “Last updated” date at the top. Continued use means you accept the updated policy.

14. Contact

Privacy requests: privacy@hiamedicaltranslator.com

We wrote this policy to be clear and readable. It is not personalized legal advice; email us at the address above if you have questions about how we handle your data.