Overview
This policy explains what Shongi ("Shongi", "we", "us") collects when you use the Shongi mobile app and related services, why we collect it, who we share it with, and the choices you have. Shongi is a personal AI health assistant built for people in Bangladesh: it helps you track symptoms and medications, chat with an AI about health questions, and find nearby doctors.
By creating an account or using the app, you agree to the collection and use of information as described here. If you do not agree, please do not use Shongi.
Information we collect
We collect only what the app's features need to work. Here is every category, in plain terms.
Identity & sign-in information
Full name, email address, phone number, sex, and preferred language (Bangla or English). If you sign in with Google, we receive your Google account identifier and profile details. If you sign in by phone, we send a one-time code (OTP) via SMS to verify your number.
Health information you share
Symptoms, medications and dosages, diagnoses, allergies, test results, and vitals that you mention in chat. Our AI extracts these into a structured health record so it can give you more relevant answers over time.
Location
When you tap "find nearby doctors," we read your device's GPS coordinates and convert them to an address via Google's geocoding service. We keep only your single most recent location fix — not a location history.
Conversations, images & shared chats
The messages you send the assistant, any images you attach, generated conversation titles, and any chat you explicitly share via a link (a sanitized snapshot is created for the recipient).
Device & diagnostic information
Basic technical data such as app version and error logs, used to keep the service running. Performance tracing is off by default and, when enabled for debugging, never captures message content.
How we use your information
- To provide the core service — generating AI responses, remembering your health history within a conversation, and showing nearby doctors.
- To authenticate you — verifying OTP codes and Google sign-in, and issuing short-lived session tokens.
- To personalize the experience — responding in your preferred language and tailoring results to your approximate area.
- To operate chat sharing — creating the sanitized snapshot when you choose to share a conversation.
- To maintain and secure the service — detecting abuse, debugging errors, and monitoring system health.
We do not use your health information to serve ads, and we do not sell it.
AI processing
To generate responses, the text of your messages — which may include health details you've shared — is sent to third-party AI providers: Google (Gemini) and, via the OpenRouter platform, models such as DeepSeek, Mistral, and Gemma. These providers process your message to return a reply and are bound by their own privacy policies and terms, which may differ from this one. We select providers that state they do not use API traffic to train their general models, but you should review each provider's policy if you want their specific commitments.
Because this processing happens on external infrastructure, your message content may be transmitted to and processed in countries other than Bangladesh.
Data retention
- Account and health records are kept for as long as your account is active, so the assistant can maintain useful context, and are deleted on request (see "Your rights" below).
- Location is overwritten each time you share a new fix; we never retain a location history.
- OTP codes are short-lived and automatically purged within 24 hours of issue.
- Shared chat links remain accessible until you delete the share or your account.
Security
All traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Passwords are stored as salted hashes, never in plain text. Sessions use short-lived access tokens paired with longer-lived refresh tokens, so a leaked access token has a narrow window of use. Access to production data is restricted to engineers who need it to operate the service.
No method of transmission or storage is 100% secure. We work to protect your information but cannot guarantee absolute security.
Your rights and choices
- Access & export — request a copy of the personal and health data we hold about you.
- Correction — ask us to fix inaccurate account or health-record details.
- Deletion — request deletion of your account and associated data. Email us and we will act on verified requests within 30 days.
- Withdraw location access — revoke location permission in your device settings at any time; "find nearby doctors" simply won't work without it.
- Language & notifications — change your preferred language, or contact us to opt out of non-essential communications.
To exercise any of these rights, email admin@sasthotech.com from the address associated with your account.
Children's privacy
Shongi is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
International data transfers
Shongi is built for users in Bangladesh, but our infrastructure providers — including database hosting and the AI services described above — operate internationally. As a result, your information may be stored or processed outside Bangladesh, in countries whose data protection laws may differ from your own. We select providers that maintain industry-standard safeguards for any such transfer.
Medical disclaimer
Shongi's AI assistant provides general health information for educational purposes only. It is not a licensed medical professional, does not diagnose conditions, and its responses are not a substitute for advice from a qualified doctor.
If you are experiencing a medical emergency, call your local emergency number or go to the nearest hospital immediately — do not rely on the app.
Third-party links
The app's doctor directory links to information about independent healthcare providers who are not employed by Shongi. We are not responsible for the accuracy of their listings or for their own privacy practices.
Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected by a new "Last updated" date above, and where changes are significant we will notify you in-app before they take effect.
Governing law
This policy is governed by the laws of the People's Republic of Bangladesh, without regard to its conflict-of-law provisions.
Contact us
Questions about this policy or how your data is handled can be sent to:
Shongi, operated by Sasthotech
Email: admin@sasthotech.com