Privacy policy
Effective 14 October 2026 · Terms and information about how this service handles personal data.
1. Information and purposes
dotdotlab processes account identifiers, email, sign-in provider and authentication information for registration and access. Consultation requests use selected clinics, doctors, procedures, country, time zone, preferred dates, contact information, messages and submitted photos. Language, notification preferences, consent timestamps and push tokens support preferences and reminders. Hosting and authentication systems may process connection information such as IP addresses.
2. Optional and sensitive information
Advertising consent is optional. Submit only information necessary for your consultation, which may include health information. Sharing patient snapshots requires separate consent. We do not automatically record entire video calls. Shared snapshots become inaccessible after 72 hours and expired files are regularly deleted.
3. Clinics and coordination
Your selected clinic and the coordinating team process information necessary for your consultation. It is not disclosed to other patients or used for unrelated sharing without consent or a legal basis. Check the selected clinic and shared information before submitting. A clinic’s own privacy policy applies to information it collects separately during medical care.
4. Service providers
Supabase supports authentication and data storage; Vercel provides web hosting. The consultation database is in Seoul, Korea. The web server currently runs in Vercel’s US region (iad1), where account and consultation information may be processed to fulfill service requests. When iPhone push is enabled, Apple APNs receives device tokens, notification identifiers and generic notification text, not consultation message contents or procedure details. Overseas processing of support data or logs depends on provider contracts and configuration. Any required transfer disclosure or consent will be provided separately before the relevant feature is offered.
5. Retention
Account information is deleted when account deletion is processed. Separate consultation, unresolved transaction or dispute records may require review. Notifications and clinic messages are retained for up to 90 days before regular deletion. Snapshots expire after 72 hours. Information is deleted or irreversibly destroyed when its purpose ends unless retention is legally required. When transactions are offered, required record categories and retention periods will be disclosed separately.
6. Your rights
You may request access, correction, deletion, restriction or withdrawal of consent. Change notification consent in Settings and location permissions on your device. Account deletion is available in Settings; contact support to request deletion of separately stored consultation records. We verify the requester and handle requests under applicable law, explaining any restrictions. Authorized representatives may also submit requests.
7. Security and cookies
Session cookies keep you signed in; blocking them can prevent authentication. We use authenticated accounts, clinic membership checks, participant access restrictions and encrypted transport. Sign out on shared devices and protect your account and device.
8. Contact and updates
Privacy contact: Seil Oh, steve.seil.oh@gmail.com. Privacy concerns may also be directed to Korea’s Privacy Infringement Report Center (privacy.kisa.or.kr, 118) or Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972). Material changes and their effective dates will be announced in the service.
닷닷랩(dotdotlab) · 오세일 · 623-10-03148
steve.seil.oh@gmail.com