Privacy Policy
Last updated 16 September 2026 · Applies to the MedQbit chat at medqbit.com and in the MedQbit mobile app
The service is under active development. Features, retention periods and this policy itself may change while we build it. When something material changes, the date above changes and the notice in the chat tells you.
1. Who we are
MedQbit is an AI healthcare chatbot operated by THETHS Technologies Pvt. Ltd. ("TheThs", "we"), the company behind the TheThs healthcare directory for Delhi-NCR. MedQbit answers from TheThs' listings.
If you sign in, you do so with your TheThs account. That account is governed by TheThs' privacy policy; this page covers what the chat does.
2. What we collect
| What | Why |
|---|---|
| The messages you type | To search the listings and write an answer. This is the main thing you give us, and you control what goes in it. |
| Your TheThs account identity, if you sign in | To show your own chat history and to handle account requests. We receive an account reference and your display name. |
| Technical request data | Your IP address and browser are used to apply rate limits and block abuse. They are stored in our security record only as one-way hashes — never as a readable address. |
| Name, phone and email — only if you ask us to contact you | When you use "Contact us", or ask to be notified about a feature, that form's details reach the TheThs team so a person can reply. |
| Feedback on a reply | A thumbs up or down, so we can find bad answers. |
| Usage statistics — only if you allow analytics | Which pages are visited, device and browser type, approximate region, and counts such as “a message was sent” or “a feature was opened”. Never the message itself. See section 8. |
Your location. MedQbit does not detect your location, and does not keep it as a setting. When you ask for something “near me”, it asks you to type an area or PIN code. What you type is part of your message and is handled like the rest of it (sections 3 and 4) — it is not kept as your location, so you type it again whenever you want results near you.
Please do not type health details you would not want recorded. MedQbit is a directory assistant: it works from "cardiologist in Dwarka" or "what is a KFT test" and does not need your diagnosis, reports or history.
3. Where your chat is stored
On your device. Where your browser supports it, the transcript is kept on your device, not on our servers, and it is what the chat reads to follow a conversation. You can back it up to an encrypted file or delete it, from the account menu.
Briefly on our servers. A turn is also written to our database so a follow-up question makes sense and so the security record is honest about what was asked. It is removed on the schedule below.
4. How long we keep things
| Record | Kept for |
|---|---|
| A conversation, if you are not signed in | 24 hours |
| A conversation, signed in with history on | 30 days |
| A conversation you delete | Removed within 24 hours |
| Security and abuse record | 180 days, with IP and browser stored as hashes and message content redacted |
| The transcript on your device | Until you delete it, or clear your browser storage |
| Contact requests you submit | As long as needed to answer you, under TheThs' policy |
5. What the AI model can see
MedQbit's replies are written by our own small language model, running on infrastructure we control. The search happens first, in our own code; the model is then given only:
- your question,
- the facts the search already found, and
- the last few turns of the conversation, for continuity.
It is never given the database, your account identity, your phone number or your address, and it cannot look anything up for itself. Your messages are not sent to any third-party AI service.
6. Reviewing chats to improve MedQbit
MedQbit is AI, and it gets things wrong. We may review conversations to find bad answers and improve the assistant — including training our own model on them.
Before anything is used for training, a person reviews it and personal details are removed: names, phone numbers, email addresses and anything else that identifies you. We do not sell your data, and we do not send it to a third party to train theirs.
7. Who else sees your data
- TheThs staff, to answer a contact request, investigate abuse, or fix a bad answer.
- Our hosting and infrastructure providers, who run the servers the service sits on.
- Google, as our analytics provider — only if you allow analytics, and only the usage statistics described in section 2.
- Authorities, where the law requires it.
We do not sell personal data and we run no advertising. The only third-party measurement on MedQbit is Google Analytics, and it does not start until you allow it.
8. Cookies, browser storage and analytics
MedQbit uses your browser's own storage — not advertising cookies — to keep you signed in, remember your theme and settings, hold your transcript on this device, and remember your choices. Clearing your browser storage removes all of it, and signs you out.
Google Analytics, only with your consent. When analytics is
switched on for MedQbit, we ask before anything is loaded — in the chat
and on these information pages alike. We ask once: an answer you give on any
page is remembered on this browser, so you are not asked again on the next
one. If you choose Allow, Google Analytics sets its own cookies
(_ga) to count visits. It receives:
- the page address without anything after it — a question in a link is removed before it is sent;
- device, browser and approximate region;
- counts of actions, such as a message being sent or a feature being opened.
It never receives what you type, the replies, your name, your account or your contact details. Google signals and ad personalisation are switched off, so nothing is used for advertising.
Changing your mind. You can withdraw at any time, and doing so is meant to take no more effort than agreeing did. Use the switch below, or, in the chat, the account menu → Settings → Privacy → Usage analytics. Either one stops collection immediately and removes the analytics cookies from this browser.
9. Your rights, and how to delete
Under India's Digital Personal Data Protection Act you may ask us for a copy of your personal data, ask us to correct it, or ask us to erase it. Two of those are buttons, not requests:
- Delete my chat data — account menu → Your data. Removes the transcript on this device and your conversations on our servers.
- Delete my account — account menu → Account. Sends a deletion request for the account itself.
- Everything else — use Contact us in the chat, or write to TheThs.
The security record is the one exception: it is append-only and kept for its 180 days, because a record that can be erased by the person it records is not a security record. It holds hashes and redacted text, not your messages.
10. How we protect it
- Everything travels over HTTPS.
- Signing in uses your TheThs session — MedQbit never asks for your password and never stores one.
- Conversations are readable only with your own session; asking for someone else's returns nothing.
- Your device backup file is encrypted with a passphrase you choose. We cannot open it, and we cannot recover it if you lose the passphrase.
11. Children
MedQbit is intended for adults. It is not designed for children, and we do not knowingly collect data from them. A parent or guardian who believes a child has used it can contact us and we will delete what we hold.
12. Contact us
Use Contact us in the chat's account menu — it reaches the TheThs team directly — or write to us through theths.com.
THETHS Technologies Pvt. Ltd., Delhi-NCR, India.