Privacy Policy
Last updated: September 23, 2026
Information handled by the service
Depending on the feature you use, wasefa ai processes account and profile details, prescription images and generated scan results, support messages you choose to send, payment records, and basic request diagnostics. Do not upload information you are not authorized to share.
Prescription images and AI processing
When you request a scan, the image and selected response language are sent to the AI provider configured for this deployment. Available providers include Google Gemini, OpenRouter, CometAPI, and Groq; the provider used depends on the active administrator configuration. Images and results may also be stored with your scan history in Supabase. Provider processing, retention, and training policies differ and can change. Review the current provider terms before using the service; we do not make a blanket claim about third-party retention or model training.
Jev and product insights
Jev features use Vercel AI Gateway and TypeSafe when configured. Jev is disabled by default. The only production path currently implemented is optional quality triage, which can send limited counts and review flags derived from an analysis; it does not send the image, medicine names, prescription text, or a direct user ID. Account-level upgrade and customer-health evaluations are not connected to live user events in this release and are available only as synthetic previews.
Storage, support, and diagnostics
Scan history and uploaded images are stored with your account until removed under the service’s data-management flow or as otherwise required to operate the service. For up to seven days, a limited scan-recovery record may also retain the request reference, processing state, and generated result so an interrupted request can be resumed without repeating the analysis. If an application error occurs, a restricted admin inbox may store an opaque request reference, operation, provider/model, HTTP status, and redacted technical detail. It is designed to exclude prescription text, images, credentials, and contact contents. Error records are cleaned after 90 days when the admin inbox is accessed.
Other service providers
The service uses Supabase for authentication, database, and object storage, and Stripe for payment processing where enabled. Support messages are stored so the team can respond. Administrators may configure optional analytics or advertising tags; those providers process data under their own policies.
Retention and requests
Account, scan, support, and payment records are kept as needed to provide the service, maintain account history, and meet applicable obligations. Contact us to ask about access, correction, or deletion. Some records may need to be retained for security, billing, or legal reasons.
Important limits
AI-generated readings may be incomplete or wrong. The service is informational and does not diagnose, prescribe, or replace a pharmacist or prescriber. Confirm medicine names, strengths, and instructions with a qualified professional before acting.
Contact
For privacy questions or data requests, use the Contact page. Include only the details needed to handle your request.