Privacy Policy — Regain Health app

Version 2026-11-06. Effective 6 November 2026. Published at https://salomatic.uz/en/legal/app-privacy-policy/, and at the same address with another language code in place of "en" for Russian (ru) and Uzbek (uz). This is the policy for the Regain Health app on iPhone and Android. The Privacy Notice of the web version of the service is at https://salomatic.uz/en/legal/privacy-notice/. The two describe the same service and the same operator.

1. Who we are

The app is published by Regain, Inc., a company of the State of Delaware, USA (651 N Broad St, Suite 201, Middletown, DE 19709). The service behind the app is operated for users in Uzbekistan by Salomatic, LLC (in Russian ООО «Salomatic», in Uzbek "Salomatic" MChJ), a company of the Republic of Uzbekistan (INN 310822815, Tashkent), which has licensed the platform to Regain, Inc. Salomatic, LLC processes the data described here.

Questions, access, correction and deletion requests: team@regain.ai, or the Salomatic patient support desk at anton@salomatic.uz. Either address reaches us; we answer in English, Russian or Uzbek.

2. Who may use it

The app is for adults who live in Uzbekistan and is offered in Uzbekistan only. It is a patient portal: you keep your own health information, read what your clinic shares with you, and book visits. It does not diagnose or treat. This app is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. In an emergency call 103.

3. What depends on your app version

Version 1.0.0 of the app has no AI assistant, no video visits and no advertising. These arrive from version 1.0.1. On any version the app reads no location, contacts or calendar, and has no voice recording or dictation outside a video visit. If a later version adds something new, this policy is updated first, the app asks for the phone permission it needs, and the change is dated in section 15.

From version 1.0.1:

• AI assistant. You choose whether to use it. The first time you send it a message, a card in the app names who processes it and asks you to allow that; until you do, nothing is sent to a model. Your messages, and the parts of your own record it reads to answer them, are then processed by Anthropic, Amazon Bedrock and Google Cloud Vertex AI, in the United States and elsewhere outside Uzbekistan. TypeSafe, in the United States, also checks them for urgent wording, and likewise sees goal suggestions and sorts new messages you send to your clinic. With memory on, the assistant keeps notes from your conversations. It says it is an AI, gives information only and does not diagnose or change treatment. To stop, use Settings, then Privacy and access, then AI assistant, then Withdraw consent; this stops it at once and does not affect your care or your record.
• Assessment report. A report may be drafted by an AI model from your record. Findings appear only after a clinician has reviewed them, and the report names who did. A report without findings may be released by automatic checks, and says no doctor reviewed it.
• Notes on results and diagnoses. Standard texts, drafted and checked with AI and labelled as such. Result notes are chosen by where your result falls against its range, diagnosis notes by the diagnosis; your data is not sent to a model for them.
• Other model-drafted text. The explanation in your checkup letter and goal suggestions are drafted by a model from your record. Documents you upload are read by a model to extract their values.
• Video visits. The app asks for the camera and microphone when you join a visit with your clinician, and uses them only during it. Before you join you are asked to agree to a recorded visit, and you cannot join without agreeing. Audio and video go through our own video servers. Your clinician can then choose to record the visit. A recording is stored encrypted with your record, transcribed by Google Cloud or Deepgram, and the transcript is structured into notes by a model (Anthropic, Amazon Bedrock or Google Cloud), including outside Uzbekistan. You can switch the camera or microphone off in your phone's settings.
• Partner clinic offers. Offers from clinics, marked "Advertisement", with the price. They come from our own service: there is no advertising network, and we do not give advertisers your data or use data from Apple Health or Health Connect for them. A clinic learns about you only if you book with it and agree, as in section 9. You can hide an offer, and switch off offer notifications in the app.

4. Steps from Apple Health and Health Connect

• The app asks you first to agree to sending your step counts to your clinic's record, and then asks your phone for permission. Only after both does it read anything.
• It reads your daily step count from Apple Health on iPhone or Health Connect on Android, and nothing else from them: no heart rate, sleep, weight, location or any other data. On Android it asks for the read-steps permission only.
• When you open the app it sends the step count for today and the seven days before, with the date, the phone model (for example "iPhone15,2", never the name you gave your phone) and the name of the app that recorded the steps, to our servers. The app shows you the result.
• We use the steps only to show you your activity, to let the clinic that cares for you follow it, and to run the features of the app. We do not sell them, do not use them for advertising and do not share them with advertisers or data brokers. Nobody reads them except as needed to support you or the clinic that cares for you, to keep the service secure, or when the law requires it.
• You can stop at any time: withdraw the consent on the Steps screen of the app, or switch the permission off in Apple Health settings or in Health Connect. Steps already sent stay under section 13.

5. Notifications

If you allow notifications, the app registers your phone with our servers. We store the notification address of your phone (the token that Apple or Google gives the app), whether it is an iPhone or an Android phone, and the date. We send notifications straight to Apple's notification service or Google's, which deliver them to your phone. Those two companies see that a notification for the Regain Health app is going to your phone, and its text.

A notification is one short line, for example that something new is waiting for you in the app. It carries no results, measurements or other health details. You can switch notifications off at any time in your phone's settings. Signing out of the app removes your phone from our list. When your account is deleted, the notification address is deleted too.

6. Face ID and the lock on your phone

The app can lock itself with Face ID, a fingerprint or the passcode of your phone, when it starts and when you come back to it after five minutes away. The unlock is done by the operating system on your phone. The app only learns whether it succeeded. Your face, fingerprint and passcode never reach the app, our servers or anyone else. The lock needs a Face ID, fingerprint or passcode already set up on your phone.

Your sign-in session is kept on the phone in its protected storage (Keychain on iPhone, Keystore on Android), available only on that phone and only when it is unlocked. Signing out removes it.

7. Other data the app handles

• Account: your phone number, name, date of birth and sex, an email address if you add one, and the security log of your sign-ins. You sign in with a one-time code sent to your phone number.
• Health information you enter: entries in the app's trackers (for example cycle, medicines, meals, water, sleep, weight and other measurements, habits, workouts, breathing exercises and daily check-ins), your answers to questionnaires, and your goals and care plan tasks.
• From your clinic: lab results, genetic or other reports and plan items that your clinic adds to your record.
• Meal photos: if you add a photo to a meal entry, the app asks your phone for permission to use the camera or your photo library, and only for the photo you take or choose. The photo is sent to our servers, stored encrypted in Frankfurt, Germany, and shown to you in the app. No program reads what is in it. If the phone is offline, the photo waits in the app's storage on your phone for up to 72 hours; while it is being sent, a temporary copy is written to the app's cache. The waiting copy is removed once the photo is sent or after 72 hours, and the temporary copy is deleted after each send. You can refuse the permission and still use the meal tracker without photos.
• Documents and goal progress photos: if you upload a document such as a lab-result PDF, or add a goal progress photo, the app asks your phone for access only to the file or photo you choose. It is sent to our servers, stored encrypted in Frankfurt, Germany, and shown to you and your clinic. This version does not analyze the content for you. A goal progress photo is different: it is visible only to you, not to your clinic. You can refuse the permission and still use the app without uploading documents or photos.
• Messages and questionnaires that you send to your clinic through the app.
• Bookings and payments: the clinics and times you book and whether a payment was made. You pay on the page of Payme or Click; we never see your card number.
• Use of the app: what you do in the app, such as opening it, opening a card, marking a task done or entering a measurement. These records carry an internal code and the kind of action, never the text you wrote.
• Technical: the IP address and device details of each signed-in session.
• The app has no third-party analytics, advertising or crash-reporting tool.

8. Why we use it

To run your health space: store and show your information, let the clinic that cares for you follow it, handle bookings, keep the service secure and answer your requests. With the version of the sign-up statement you accepted, we also measure how the app is used (under an internal code, never your name). That statement also mentions using anonymised chats to improve our own AI; this version has no chat, so the app sends none. We do not use your data for marketing. We never sell or rent it.

9. Who receives it

• Hosting: Amazon Web Services (Frankfurt, Germany) and Hetzner (Falkenstein, Germany). Earlier servers at Hetzner in Helsinki, Finland, which hosted the service until 6 October 2026, still hold the data as it was then. Encrypted backups are in Germany.
• Sign-in codes: Eskiz, an Uzbek SMS gateway, delivers the one-time codes, and Telegram where a code goes there.
• Notifications: Apple (iPhone) and Google (Android), as in section 5.
• Payments: Payme or Click, on their own pages.
• AI processing, from version 1.0.1: Anthropic, Amazon Bedrock, Google Cloud Vertex AI and TypeSafe process what section 3 describes. Google Cloud or Deepgram transcribe a visit recording, as in section 3.
• Clinics: a clinic you book with receives your name, date of birth, sex and phone number only if you agree at each booking. The clinic that answers for the service receives your question, a critical result or an urgent warning sign, with the details needed to act, as the Privacy Notice describes.
• The clinic that cares for you sees the steps and the entries you share with it.

10. Where it is stored

On servers outside Uzbekistan, in Germany (and in Finland as noted in section 9). We make no claim here about compliance with data localisation or cross-border transfer rules, which are being reviewed by counsel.

11. Security

Data travels encrypted. Uploaded documents and database backups are stored encrypted. Each user and each clinic sees only the data they are allowed to see. No system is completely secure.

12. Your choices

You can switch off steps, notifications and Face ID in the app or in your phone's settings, withdraw the steps consent in the app and, from version 1.0.1, withdraw the AI assistant consent in the app. Withdrawing the sign-up consent closes your account.

13. How long we keep it, and deleting it

We keep your data while your account is open. You can ask to delete your account in the app (Me screen, then the account deletion row) or by writing to team@regain.ai. Nothing is deleted until you confirm, and after a waiting period of 30 days, which you can stop, we delete your name, date of birth, address, phone number, email, sign-in details, notification address, uploaded documents, goal progress photos, cycle-tracking entries and messages, and the records of what you did in the app.

What stays in the service, under an internal code and without your name and contact details, and why:

• Results, reports, measurements and plan items your clinic added, and your appointments: they are part of the medical record that the clinic that cares for you must keep by law. We keep them for that clinic.
• Your tracker entries (medicines, meals, water, sleep, weight and other measurements, habits, workouts, breathing exercises), daily check-ins, questionnaire answers, goals and daily steps: the clinic that cares for you follows them in your record, so they are part of the same medical record and are kept on the same basis.
• Meal photos: kept with the meal entry they belong to, as the sign-up statement you accepted says: closing the account deletes your name, contact details, documents and messages, and the rest of the record is kept under an internal code. Nobody at the clinic sees them.
• Bookings and payments: kept as accounting records of the payments made.
• Records of your consents and the security log: kept to show what you agreed to and when, and to keep the service secure.

Copies in backups expire within 95 days. Usage records are removed after one year. Data you shared with a clinic stays with that clinic.

14. Children

Not for people under 18.

15. Changes

Version 2026-11-06 adds what version 1.0.1 of the app brings: the AI assistant and who processes your data for it, AI-drafted reports and notes, video visits and partner clinic offers (sections 3, 9 and 12). Version 2026-10-28 adds document and goal-progress-photo uploads and explains who can see them. On 28 October 2026 section 13 was also made to list what account deletion keeps and why, item by item. Each version has a date. When the sign-up statement changes, the app asks you to accept the new version.