Dr.Supernova Patient Portal

Last updated: July 28, 2026

Dr. Supernova ("we", "us") operates the Dr.Supernova Patient Portal (the Android app and related patient web pages on our mobile hosts). We coordinate healthcare and travel services for patients. This notice describes how we handle personal and health-related information in the patient app. It does not apply to Dr. Supernova Academy or other products.

Contact: privacy@drsupernova.com.

This policy covers:

  • The Dr.Supernova Patient Portal Android app (package com.drsupernova.patient.dev)
  • Patient web pages and APIs loaded inside the app or accessed on our mobile domains (for example mobile.drsupernova.com and dev.mobile.drsupernova.com for testing)

Some features use native screens; others open in an in-app browser (WebView) when no native equivalent exists (for example messages, travel, or finances).

Depending on how you use the app, we may process:

  • Account and identity: name, email, phone number, date of birth, password (stored securely on our servers), profile photo, and login/session data.
  • Health and care information: appointments, treatments, examinations, medical history (conditions, surgeries, allergies), medications, care notes, and related clinical content you or your care team add.
  • Documents and photos: medical reports, personal documents, travel documents (for example passport or insurance), and images you capture or upload for care planning.
  • Messages: chat with care partners, drivers, or support through in-app messaging features.
  • Financial visibility: invoices, proformas, receipts, and payment status shown in the patient portal (we do not process in-app purchases through Google Play).
  • Location: when you use travel or map features and grant permission, we may use your device location to help with hospital trips and live travel coordination.
  • Device and push data: Firebase Cloud Messaging (FCM) token, device model and OS information (for example when restoring login or registering push), and network-related data needed to deliver the service.
  • Telehealth: audio and video (and screen content if you choose to share your screen) during video meetings with your care team.
  • Product measurement: app activity and the Android advertising identifier (Advertising ID) through Firebase Analytics to understand how the app is used and improve reliability. We do not show ads in the patient app.
  • On your device: session cookies, a mobile login token, theme preferences, optional cached appointment or page data, and a local diagnostic log file. These stores are app-private but are not separately encrypted on the device today.
  • Provide and secure your patient account and login
  • Deliver healthcare coordination: appointments, treatment information, documents, and notifications about your care
  • Enable messaging with your care team, partners, or drivers when you use those features
  • Send push notifications about appointments, travel, medications, or other care updates (you can adjust preferences in the app)
  • Run telehealth meetings through our meeting service
  • Support hospital travel and logistics, including maps and location when permitted
  • Process QR codes on-device when you use scan features
  • Maintain security, prevent abuse, and troubleshoot issues
  • Measure app usage and performance through Firebase Analytics

We do not use your health information for third-party advertising.

  • Care team and hospitals: staff involved in your treatment and coordination can access information needed for your care.
  • Companions and family members: only when you grant specific permissions in Sharing & permissions (for example medical history, documents, travel, or finance). You control what each companion can see.
  • Service providers (processors): Google Firebase — push notifications and analytics
  • Google location / maps-related services — when you use travel or location features
  • Jitsi meeting infrastructure (meet.drsupernova.com) — audio, video, and optional screen sharing during telehealth
  • Google ML Kit — on-device barcode/QR processing (frames are not uploaded for that scan path)

We do not sell your personal information. We do not use AdMob or similar ad networks in the patient app.

The app may ask for permissions only when needed:

  • Notifications — appointment and care updates
  • Location — travel and maps for hospital trips
  • Camera — document photos, QR scan, and video meetings
  • Microphone and Bluetooth — telehealth calls and headset audio
  • Photos, videos, and files — uploading medical, personal, or travel documents

You can deny or revoke permissions in Android settings; some features may not work without them.

  • We store a mobile login token and preferences in app-private storage to keep you signed in.
  • WebView session cookies and local storage hold your session and some settings.
  • We may cache appointment or page data locally to improve performance.
  • Push notifications may appear on your lock screen; they can include care-related information. Adjust notification preferences in the app if you want fewer alerts.
  • Android backup for this app is disabled (allowBackup=false).

You can delete your patient app account from Account & data deletion in Profile settings (or request deletion without signing in from that page).

When you delete your account we typically:

  • Remove your login access and clear push tokens and mobile login tokens
  • Clear in-app notifications and deactivate companion access grants you had issued
  • Pseudonymize contact details used only for portal login where applicable

We may retain some information where required for healthcare, tax, accounting, or legal obligations, including:

  • Medical and treatment records
  • Appointment history tied to your care
  • Invoices and financial records
  • Security, fraud-prevention, and accountability logs
  • A minimal record that your deletion request was received and completed

Retained information is not used for marketing or routine app services.

A full self-service data export is not yet available in the app; you can contact us at privacy@drsupernova.com to exercise your rights.

Depending on where you live, you may have rights to:

  • Access, correct, or delete personal information
  • Restrict or object to certain processing
  • Receive a copy of your data (portability)
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with your local data protection authority

Contact privacy@drsupernova.com to make a request. We may need to verify your identity.

The patient portal is intended for adult patients receiving care. It is not directed at children, and we do not knowingly collect information from children through this app as a standalone audience.

Our systems and service providers (including Google and our meeting infrastructure) may process data in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

We may update this notice from time to time. We will post the revised version at this URL and update the "Last updated" date. Material changes may also be communicated in the app where appropriate.

Account & data deletion

To remove your app account or learn what is retained after deletion: