How we handle your data
The short version
- We keep only what you or your family send: the documents themselves, what we read from them once you confirm it, voice notes and messages.
- Records are stored in Germany (EU).
- Nobody sees a person's file unless that person said yes, or, for a child or someone without WhatsApp, the person looking after the file did. A yes can be taken back at any time.
- Our team does not read your records, with two exceptions: checking the lab values the system read during early access, and when you ask to talk to a person.
- The assistant is an AI, not a doctor. It explains, and tells you when to see a doctor or go to the emergency room.
- Nothing is sold or shared for advertising.
- You can delete a file or your whole account at any time. Deletion runs within a day; backups follow within 7 days.
باختصار
- بنحفظ بس اللي إنتو أو العيلة بتبعتوه: المستندات نفسها، واللي بنقراه منه بعد ما توافقوا عليه، والفويس نوت، والرسايل.
- الملفات محفوظة في ألمانيا (الاتحاد الأوروبي).
- محدش يشوف ملف حد غير لو صاحبه وافق، أو اللي بيتابعه لو طفل أو حد مالوش واتساب. وتقدروا تلغوا الموافقة في أي وقت.
- الفريق بتاعنا مش بيقرا ملفاتكم، إلا في حالتين: مراجعة التحاليل اللي اتقرت في الفترة الأولى، ولما تطلبوا تكلموا حد.
- المساعد ذكاء اصطناعي، مش دكتور. بيشرح وبيقولكم إمتى تروحوا للدكتور أو الطوارئ.
- مش بنبيع ولا بنشارك بياناتكم مع حد للإعلانات.
- تقدروا تمسحوا ملف أو حسابكم كله في أي وقت. المسح بيخلص خلال يوم، والنسخ الاحتياطية بتتمسح خلال ٧ أيام.
Privacy and how we handle your family's records
Who runs this
Malaffaty is run by Applied AI Inc, a Delaware corporation, under its ExAutomatica brand. Questions and requests about your data: hello@malaffaty.com, or write to us in the same WhatsApp chat.
It is in early access. It is free while it is in early access. It is not a doctor, a clinic or a medical device.
What we keep
Only what you or your family send us, and what we read out of it:
- the documents themselves: photos and PDFs of lab results, prescriptions, scans, vaccine cards, letters, as you sent them, unchanged;
- the facts we read from them, after you confirm them in the chat: test names and values, medicines and doses, allergies, conditions, vaccines, measurements;
- voice notes, kept as audio, and the text we transcribe from them;
- the names of the people in your family and who may see whose file;
- your phone number (it is how you sign in) and, if you give it, your email (used only to confirm a new phone);
- the messages between you and us, and the questions you asked;
- reminders you set, and medicine ticks.
We do not keep your location, your contacts, your other WhatsApp conversations, or anything you did not send to this number or type on our website.
Where it lives
- Your records, documents and audio are stored in a database and file store run by Supabase, in a project dedicated to this product, in Frankfurt, Germany (EU). Backups are taken daily and kept for 7 days.
- The website and the chat endpoint run on Vercel; our code runs in Frankfurt, Germany (EU), and the pages themselves are served from Vercel's worldwide network. Vercel runs our code; your records are not stored there.
Who processes it, and why
Each of these receives only what it needs to do its one job:
| Service | What it receives | Why |
|---|---|---|
| WhatsApp (Meta) | your messages, photos, PDFs and voice notes, on the way to us and back | it is the chat you talk to us in; Meta's own WhatsApp terms apply to the transport |
| Anthropic (the Claude models) | the photo or PDF you sent, so it can be read; the text of your question and the confirmed facts of the person you asked about, so it can be answered | reading documents and answering questions; requests are processed in the United States. Anthropic does not train on our requests under our terms with them |
| Dify (our own installation) | the same requests, in passing | the software that runs the reading and answering steps; hosted by us on DigitalOcean in Amsterdam (EU); keeps run logs for a limited time |
| OpenAI (transcription) | your voice notes, as audio, to turn them into text | so a spoken question can be answered; the same service our other products use for this |
| Resend | your email address and a one-time code; and, when you ask to talk to a person, a note to our team's inbox | only when you sign in from a new phone and chose to give an email, and to reach our team |
| PostHog | event names and identifiers only (for example "document confirmed", never the document) | counting whether the product works; no session recording, no content |
We use no advertising services, no data brokers, and no AI provider beyond the two named above. Nothing is sold, rented or shared for marketing. The company's other products do not have access to this product's records.
Who sees your family's records
Only you decide who sees it.
- Each person has their own file. You see your own file. Anyone else sees a person's file only because that person said yes in WhatsApp, or, for a child or a parent who does not use WhatsApp, because the person looking after that file said yes.
- A yes is one-way and can be taken back at any time; taking it back stops future access immediately. Copies already delivered to someone's phone are theirs; we cannot take those back.
- Two people who look after the same family member do not see each other's files because of it.
- Our team does not read your records in the course of normal operation. Two exceptions, both logged: during early access a member of our team checks the lab values the system read out, so that misreadings are caught; and when you ask in the chat to talk to a person, a member of our team reads that conversation to help you.
Family members and their rights
When someone adds an adult relative who has WhatsApp, we send that relative one message asking whether they agree. If they say no, nothing more is shared from their file until they say yes, and they can take over their own file at any time. Children's files are kept by a parent or guardian until the child is an adult and asks for them.
What the assistant is, and is not
The assistant in the chat is an AI. It tells you so in its first message. It reads your documents and answers from them, and it gives general guidance in plain words: what a value usually means, what to ask the doctor, when to go now. It does not diagnose and it does not prescribe. When a value is in a dangerous range it tells you to seek care immediately. It is not a substitute for a doctor.
Your rights
In the chat or by email, at any time:
- See everything we hold about you or a family member you look after, on the website.
- Correct anything we read wrongly; the correction is kept next to the original.
- Delete your account, or one person's file. Deletion runs within a day and removes the documents, the facts, the audio and the messages; backups follow within 7 days. A family member's file that someone else also looks after stays with them.
- Take your records with you on request during early access; a download button comes later.
How long we keep it
For as long as your account exists. After deletion, 7 days in backups, then nothing. Our own record of who granted and removed access is kept for one year for your protection.
Where the law stands
Your records are hosted in the European Union. We are reviewing Egyptian data-protection requirements for health records before public launch, and this page will say what changes. During early access this page, the first message in the chat, and the consent message to family members are the terms you are agreeing to.
Changes
When this page changes, we tell you in the chat before the change applies.
Last updated Oct 30 2026. Counsel review pending.