Kelbetty ("we," "us," "our") operates the kelbetty.com platform. This Privacy Policy describes how we collect, use, store, and protect your personal information, including health data.
1. What Data We Collect
We collect the following categories of data to provide our services:
- •Registration data: name, email, password, role (patient/doctor)
- •Profile data: age, gender, contact information, medical specialization (for doctors)
- •Health data: symptom descriptions, questionnaire responses, session history, AI-generated clinical summaries
- •Technical data: IP address, browser type, operating system, platform usage data
- •Cookies and analytics: to improve service performance
2. Health Data Processing
Health data is a particularly sensitive category of personal data. We apply enhanced protection measures when processing it:
- •Health data is processed only with your explicit consent
- •Only you and doctors to whom you have explicitly granted access can view your health data
- •AI models process data to generate clinical summaries but do not store it separately
- •We do not sell or share your health data with third parties for marketing purposes
3. How We Use Data
Collected data is used for the following purposes:
- •Providing and improving platform services
- •Generating AI summaries based on symptom descriptions
- •Facilitating communication between patients and doctors
- •Sending important service notifications
- •Ensuring security and preventing fraud
- •Analytics for improving platform quality (in anonymized form)
4. Legal Basis for Processing
We process your data based on the following legal grounds:
- •Consent — for processing health data and sending marketing communications
- •Contract performance — for providing platform services
- •Legitimate interest — for improving the service and ensuring security
- •Legal obligation — for compliance with applicable legislation
5. Data Sharing with Third Parties
We may share your data with the following categories of recipients:
- •Doctors to whom you have explicitly granted access through the platform
- •Infrastructure service providers (hosting, cloud services) under appropriate data protection agreements
- •AI service providers for symptom processing (data is anonymized where possible)
- •Government authorities — only when required by law
6. Data Storage and Security
We apply modern technical and organizational measures to protect your data:
- •Data encryption in transit (TLS/SSL) and at rest
- •Role-based access control (RBAC)
- •Regular data backups
- •Security monitoring and incident detection
- •Data is stored on secure servers using industry-standard security practices
7. Data Retention Periods
We retain your data for the following periods:
- •Account data — while the account is active, and for 30 days after deletion
- •Health data (sessions, summaries) — for 3 years after last activity or until a deletion request
- •Technical logs — up to 12 months
- •Anonymized analytical data — indefinitely
8. Your Rights
Under applicable legislation, you have the following rights:
- •Right of access — to obtain information about what data we hold about you
- •Right to rectification — to update or correct inaccurate data
- •Right to erasure — to request deletion of your personal data
- •Right to restriction — to restrict the processing of your data
- •Right to portability — to receive a copy of your data in a machine-readable format
- •Right to withdraw consent — to withdraw your consent at any time
- •To exercise your rights, contact us at: main@kelbetty.com
9. Cookies
We use cookies and similar technologies to ensure the platform functions properly:
- •Essential cookies — for authentication and session security
- •Functional cookies — for saving your preferences (language, theme)
- •Analytics cookies — for understanding how the platform is used (anonymized data)
10. Children's Data
The platform is not intended for use by individuals under 18 years of age. We do not knowingly collect data from minors. If you are a parent or guardian and believe your child has provided us with their data, please contact us for its removal.
11. International Data Transfers
Your data may be processed on servers located outside the Republic of Kazakhstan. In such cases, we ensure an adequate level of data protection in accordance with applicable legislation.
12. Policy Changes
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a notification on the platform. We recommend reviewing this page periodically.
13. Contact Information
For questions related to personal data processing, please contact us:
- •Email: main@kelbetty.com
- •Website: kelbetty.com