Your information, handled with care.

We collect information you provide, information created when you use the app, and limited information received from the services that help us operate it. Depending on how you use the app, this may include:

• Account and identity information: email address, name, username, Clerk account identifier, profile image, and authentication or account-status information.
• Onboarding and profile information: phone number, gender, date of birth, city, country, country code, selected procedure interests, and related profile settings. Some of this information may be optional or editable.
• App content and interactions: comments, profile images, follows, likes, notification preferences, and other information associated with your use of the community. Posts and stories may be created by administrators on behalf of the clinic or practice.
• Device and notification information: push notification tokens, device name and model, operating-system version, app version, platform, and notification delivery status when you grant notification permission.
• Usage and diagnostics: screens and actions viewed, sign-in and onboarding events, feature interactions, crash information, and technical diagnostics. PostHog analytics may be linked to your account identifier and associated profile information when you are signed in.
• Approximate location for prefill: the app may request an approximate country and city derived from your IP address through its location endpoint to prefill onboarding or profile fields. You can review and change those fields.

Please do not submit passwords, verification codes, payment card details, medical records, or other sensitive information through support email or community comments. The app may let you record procedure interests, but it is not intended to be a medical-record system.

We use information for purposes such as:

• creating and securing your account and authenticating you;
• providing profiles, procedure information, posts, stories, comments, and community features;
• saving your onboarding choices and procedure interests;
• sending notifications you enable, including updates about posts, comments, and app activity;
• responding to support requests, account-deletion requests, and safety concerns;
• understanding app usage, improving reliability and usability, and diagnosing crashes or other technical problems;
• preventing misuse, protecting users, enforcing our terms, and complying with legal obligations; and
• supporting appointment or clinic-contact flows that you choose to start.

We do not use the app to diagnose conditions or provide a substitute for a consultation with a qualified healthcare professional. Procedure information is general and educational.

We share information only as needed to provide, secure, and improve the app, respond to you, or comply with law. Depending on the feature, recipients may include:

• Clerk: authentication and account identity services, including sign-in details and account profile data.
• Our backend and Supabase-hosted data services: storage and retrieval of user, profile, procedure, content, comments, device, and app-operation records.
• PostHog: product analytics and feature-use measurement, including events linked to a signed-in user as described above.
• Firebase services: push messaging and crash reporting or diagnostics, where enabled by the app and your device permissions.
• RG Aesthetics and its support personnel: to answer support requests, manage clinic-related content, and assist with app or appointment questions.

The app may open external WhatsApp or appointment links when you choose to contact the clinic or request an appointment. Those services receive information according to their own privacy policies and terms; review them before submitting information. We do not sell personal information for money.

We may also disclose information to professional advisers, authorities, or another organization involved in a merger, acquisition, or reorganization where permitted or required by law. We do not share information for a new purpose unrelated to this policy without a suitable notice or other lawful basis.

We keep information for as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining security, resolving disputes, enforcing agreements, and meeting legal or accounting requirements. We do not state a fixed retention period because it can vary by data type, feature, account status, and legal requirement.

You can request deletion of your account and associated app data by emailing contact@drrajatgupta.com. Please send the request from the email address linked to your account where possible. We may need to verify ownership before acting. Some information may be retained where required by law, needed for security or fraud prevention, or held in backups for a limited period before routine deletion.

We use access controls and technical and organizational safeguards intended to protect information against unauthorized access, loss, misuse, or alteration. No internet transmission or storage system can be guaranteed to be completely secure, so please use a strong password, protect your verification codes, and contact us promptly if you suspect unauthorized access.

W3 Dev Private Limited and the service providers described above may process information in India or other countries where they or their infrastructure operate. Those locations may have data protection rules different from your own. We use contractual, technical, or other safeguards appropriate to the transfer and applicable law; we do not claim that any particular transfer mechanism or compliance certification applies in every case.

You can review or update available profile fields in the app, choose whether to allow notifications in your device settings, and choose whether to follow external WhatsApp or appointment links. You can also contact support to ask questions about your information or request account deletion.

Depending on where you live and subject to applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information, or to withdraw consent where processing is based on consent. To make a request, email contact@drrajatgupta.com. We may ask for information needed to verify your request. You may also have the right to complain to a data-protection authority in your jurisdiction.

My Plastic Surgery App is intended for people who are 18 or older. We do not knowingly invite or intentionally collect personal information from children under 18. If you believe a child has provided information, please contact us so we can review the request and take appropriate action.

We may update this policy when the app, our data practices, or applicable requirements change. We will post the updated policy at this URL and update the effective date. Please review it periodically.