A public health initiative for the people of Indonesia

ID EN 中文
StoDi Guard Public Health Initiative

StoDi Guard

Privacy Policy

This policy explains what data the StoDi Guard app and website collect, what it is used for, and your rights over it, in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP").

Last updated: 18 October 2026 Draft — this document is under review and may change before the app is released.

1. Who we are

StoDi Guard is a health-education app that estimates stroke and diabetes risk. The StoDi Guard team acts as the controller of the personal data you provide. You can contact us by email at the end of this document.

2. Data we collect

  • Account data: name, email address, password (stored as a one-way hash), language preference and the time you gave consent.
  • Health data you enter: age, sex, education and income category, height and weight, blood pressure and cholesterol status, smoking and drinking habits, physical activity, access to healthcare, and history of stroke, diabetes and related conditions. Under UU PDP this is specific (sensitive) personal data.
  • Analysis results: risk scores, priorities and plans generated for you.
  • Conversations with the AI assistant, including reports you send about AI answers.
  • Technical data: IP address and server logs needed for security, sign-in rate limiting and troubleshooting.

3. How we use data

  • To estimate your risk and build your personal prevention plan.
  • To run the AI assistant, which answers based on your data.
  • To keep your history so you can see how your risk changes over time.
  • To manage your account, send verification and password-reset emails, and keep the service secure.

We do not sell your data, use it for advertising, or share it with others for marketing.

4. Legal basis

We process your health data based on the explicit consent you give when you sign up. You can withdraw consent at any time by deleting your account; we then stop processing your data.

5. Service providers

  • Google (Gemini API): when you use the AI assistant, your health answers, analysis results and questions are sent to Google to generate a reply. Your name and email are not sent. Google may process this data outside Indonesia.
  • The hosting provider that runs our application and database.
  • The email provider that delivers verification and password-reset emails.

These providers only process data as needed to deliver their service.

6. Security

Connections to our service use HTTPS. Health answers, full analysis results and AI conversations are stored encrypted. Passwords are stored as hashes. Server access is limited to authorised team members.

7. Retention

We keep your data while your account is active. When you delete your account, all account data, health data, analysis results and AI conversations are deleted from our systems immediately. Encrypted backup copies are removed automatically within 30 days. Technical server logs are kept for at most 90 days.

8. Your rights

  • Access your personal data and request a copy.
  • Update or correct your data (for example by re-entering your health data or editing your profile).
  • Delete your account and all data, in the app or on the Delete Account page of the website.
  • Withdraw your consent to processing.
  • Raise objections or questions about processing by email.

9. Age

StoDi Guard is intended for users aged 18 and over. We do not knowingly collect data from children.

10. Changes

If this policy changes in an important way, we will let you know in the app or by email before the change takes effect.

Questions about this document? Contact us at support@stodiguard.id.