3Diagno privacy policy
What the 3Diagno app does with your information. In short: an account to sign in with, and clinical work that stays on your device.
Effective date: September 18, 2026 Last updated: September 18, 2026
| App name | 3Diagno |
| Developer / publisher | Dr. Faris Arab |
| Data controller | Sukon Medical Tourism pvt. ltd. |
| Mailing address | Sukon Medical Tourism Private Limited, 605, Ground Floor, Niti Khand-2, Indirapuram, Ghaziabad, Uttar Pradesh, India, 201014 |
| Website | https://sukonmed.com |
| Privacy contact | info@sukonmed.com |
This Privacy Policy explains how the 3Diagno application ("3Diagno", "the app", "we", "us") handles your information. It applies to the 3Diagno app published on Google Play under the package name com.drfaris.physiomotion, to the iOS version published on the App Store, and to any web version of the app.
3Diagno is a human biomechanics simulator used for education, visualization, and clinical reference. Earlier materials may refer to the app as "3D PhysioMotion"; 3Diagno is the current store-listing name.
By using 3Diagno, you agree to this Privacy Policy.
Note on an earlier version. Until this update, this policy stated that 3Diagno had no user accounts and collected no personal data. That is no longer accurate: 3Diagno now requires an account in order to open the app. This version describes what that account involves. Your clinical and assessment content is still processed only on your device, and is still never uploaded to us.
1. Summary
- 3Diagno requires an account. Creating one means we hold your email address, your name, and an account identifier.
- Accounts are operated for us by Firebase Authentication, a Google service. We run no user database of our own.
- Your clinical and assessment content never leaves your device. We cannot see it, retrieve it, or recover it.
- 3Diagno now saves your reports on your device, under My Reports, so you can reopen and finish them. They are kept per account on that device and are not uploaded anywhere.
- Your profession and country are stored on your device only and are never sent to us.
- 3Diagno contains no advertising SDKs and does not use advertising identifiers.
- The web version uses aggregate, non-identifying traffic analytics. The Android and iOS apps do not.
- We do not sell your data or share it with advertisers or data brokers.
- You can delete your account from inside the app, at any time, and the account record is erased immediately. Doing so also erases your saved reports on that device.
2. The account, and the data it involves
2.1 What we receive
Using 3Diagno requires an account. Depending on how you register, the account record holds:
| Data | Source | Notes |
|---|---|---|
| Email address | You, or Google / Apple | Used to identify and contact you |
| Name | You, or Google / Apple | The display name shown in the app |
| Account identifier (UID) | Generated at sign-up | An internal, non-public identifier |
| Password | You | Stored only in hashed form by Firebase. We never see or hold it |
| Email-confirmed status | Firebase | Whether you have confirmed your address |
| Sign-in and creation timestamps | Firebase | When the account was made, and when it last signed in |
| Sign-in method | Firebase | Whether the account uses a password, Google, or Apple |
| Access level | Set by us | Whether the account is an ordinary clinician account or an administrator |
| Profile photo URL | Google may supply one when you sign in with Google. 3Diagno does not display or use it |
2.2 Signing in with Google or Apple
If you choose Sign in with Google or Sign in with Apple, that platform confirms your identity to us and passes us the fields listed above. We receive this information from them; we do not receive your password, your contacts, or anything else in your Google or Apple account.
If you sign in with Apple and choose to hide your email address, Apple gives us a private relay address instead of your real one. The app works normally with a relay address, and we never learn the address behind it.
2.3 Why we need it
| Purpose | Data used | GDPR legal basis |
|---|---|---|
| Create your account and sign you in | Email, password or provider identity, UID | Performance of a contract |
| Confirm your email address and allow password reset | Performance of a contract | |
| Keep the app usable offline for up to 30 days between sign-in checks | Sign-in timestamp (held on your device) | Performance of a contract |
| Decide which editing tools your account may open | Access level | Performance of a contract |
| Answer support requests and contact you about the app | Email, name | Legitimate interests |
| Protect against tampered or unauthorised copies of the app | Device integrity verdict | Legitimate interests |
| Measure aggregate traffic on the web version | Non-identifying page requests | Legitimate interests |
We do not use your account data for advertising, and we do not sell it.
2.4 What stays on your device and is never sent to us
- Your profession and country, which the app asks for at registration. These are saved in the app's own storage on your device, keyed to your account, and are not transmitted to us. A reinstall loses them and the app asks again.
- The date of your last successful sign-in check, so the app can keep working without an internet connection for up to 30 days at a time.
- All clinical and assessment content — see Section 3.
3. Data you enter into the app (stored on your device only)
3Diagno lets you enter and generate content for educational and clinical-reference purposes, such as:
- Assessment details and clinical notes you type in
- Joint positions, movement selections, and motion recordings
- Generated reports and exported files
- The saved reports held in My Reports — see Section 3.1
This content is created and processed locally on your device, inside the app's own storage (including browser/WebView storage where applicable). It is never uploaded to us, and we have no access to it and no ability to view, retrieve, or recover it. Having an account does not change this.
Signing out does not delete this content; it stays on the device until you clear the app's storage or uninstall the app.
You are the controller of this content. If it relates to identifiable patients, you remain responsible for handling it in line with your professional, institutional, and legal obligations (for example HIPAA, GDPR, or your local equivalent).
3.1 Saved reports ("My Reports")
3Diagno keeps a library of your assessments on your device, which you open from the controls menu under My Reports.
- Assessments are saved automatically as you fill them in, so that closing the app, switching to another app, or the device reclaiming memory does not lose work you have already done. A saved assessment appears in the library as In progress until you finalise it.
- A completed assistant (triage) session is also saved, as a draft, so that the history and self-test answers it collected can be reopened later and finished as a full assessment rather than collected twice.
- The library is held per account on that device. Where more than one clinician signs in to the same device, each sees only their own reports. This separates them on screen; it is not encryption, and anyone with access to an unlocked device may be able to reach the underlying storage. Section 8 applies.
- Being tied to your account does not mean the reports leave the device. The account only determines which library is shown. Nothing in it is transmitted to us or to anyone else, we cannot view or recover it, and it exists only in that one installation's storage — a second device, or a reinstall, starts empty.
- You can delete any saved report at any time from within My Reports. Deletion is immediate and permanent.
4. Data sharing
We do not sell, rent, or transfer your personal data to advertisers, data brokers, or analytics profiling services.
Account data is shared only with the service providers that make the account work, listed in Section 5, who process it on our instructions.
The only way your clinical content leaves the app is when you choose to export or share a file using your device's own sharing controls. In that case you select the destination and the recipient, and the transfer is handled by your operating system, not by 3Diagno. Once a file leaves the app, protecting it is your responsibility.
5. Service providers and platform services
The following process data on our behalf, or independently under their own policies:
- Firebase Authentication (Google) stores the account record described in Section 2 and handles sign-in, email confirmation, and password reset. See the Google Privacy Policy.
- Google Sign-In and Sign in with Apple confirm your identity if you use them, and pass us the fields in Section 2.1.
- Google Play Integrity checks that the installed app is a genuine, unmodified copy. This returns a verdict about the device and app, not about you.
- Vercel hosts the web version and may process standard technical request logs, such as IP address and browser type, for security and service delivery.
- Vercel Web Analytics measures aggregate traffic on the web version only — page views and referrers, without advertising identifiers or cross-site tracking. The Android and iOS apps do not include it.
- Google Play and the Apple App Store may process installation, device compatibility, security, and store-account information when you download or update the app.
These services do not receive the clinical-reference content stored inside the app.
International transfers. These providers operate globally, so your account data may be processed outside your country, including in the United States. Where required, transfers rely on the providers' own safeguards, such as the European Commission's Standard Contractual Clauses.
6. Who can see your account data
Access to account records is limited to authorised personnel, and only for account support, security, and abuse prevention. Nobody at Sukon Medical Tourism pvt. ltd. can see the clinical or assessment content on your device, because it never reaches us.
7. Children
3Diagno is intended for clinicians, educators, students, and other adult users. It is not directed at children and is not designed for use by children as its primary audience. We do not knowingly collect any data from children. If you believe a child has created an account, contact us and we will delete it.
8. Data security
Account credentials are handled by Firebase Authentication. Passwords are stored only in hashed form by that service; we never see, hold, or transmit your password. Sign-in uses tokens issued by Firebase rather than stored credentials, and those tokens are held in the platform's own protected storage on your device. Traffic between the app and these services is encrypted in transit using TLS.
The clinical content you enter, including your saved reports, stays on your device, which removes the risk of a server-side breach of that content entirely. The corollary is that the security of that content is the security of the device it is on, and that we cannot restore it if the device is lost or wiped.
No device, operating system, export workflow, or storage location can be guaranteed to be completely secure. We recommend that you use a device passcode or biometric lock, keep your device operating system updated, use a strong and unique password, and use secure methods when sharing exported files.
9. Data retention
| Type of data | Retention |
|---|---|
| Your account record (email, name, UID, sign-in metadata) | Kept while your account exists. Deleted immediately when you delete your account — we keep no copy, backup, or export of it |
| Profession and country | On your device only, until you clear the app's storage or uninstall the app |
| Clinical content stored in the app | On your device only, until you clear the app's storage, reset the data in the app, or uninstall the app |
| Saved reports (My Reports) | On your device only, until you delete the report in the app, delete your account on that device, clear the app's storage, or uninstall the app |
| Files you export or share | Remain wherever you saved or sent them, until you or the recipient deletes them |
| Emails you send to the privacy contact | Kept only as long as needed to answer your request, meet a legal obligation, or resolve a dispute, then deleted |
| Aggregate web analytics | Retained by Vercel in aggregate, non-identifying form under its own policy |
10. Deleting your account and your data
Delete your account from inside the app. Open the controls menu, choose Profile, then Edit profile, then Delete my account, and confirm. The account record is erased immediately and permanently. This cannot be undone. For your security, the app may ask you to sign in again first if your session is more than a few minutes old.
Delete it without installing the app. A web form is also available for deleting an account without the app installed, as required by Google Play. Its address is given on the app's store listing.
Deleting your saved reports. Deleting your account from inside the app also erases the reports saved under it in My Reports on the device you delete it from, including unfinished drafts. You can also delete reports individually, at any time, from within My Reports. If you have used 3Diagno on more than one device, the libraries on the others are untouched — we cannot reach them — so clear the app's storage or uninstall it on each of those as well.
Deleting the other content on your device. Account deletion does not erase the motion recordings, saved poses, and settings held on your device, which are not tied to an account. To remove those, clear the app's storage (on Android: Settings → Apps → 3Diagno → Storage → Clear storage) or uninstall the app. Then delete any exported files from wherever you saved them, and ask anyone you shared them with to delete their copies.
By email. You can also write to info@sukonmed.com with the subject line "3Diagno Data Deletion Request". We will action the request after reasonable identity verification, normally within 30 days, unless retention is required by law or necessary for security or dispute resolution.
11. Your rights
Depending on where you live, you have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, to withdraw consent where processing relies on consent, and to request a portable copy of it.
If you are in the European Economic Area or the United Kingdom, these rights arise under the GDPR and UK GDPR, and the legal bases we rely on are set out in Section 2.3.
In practice:
- Access and portability — your name and email are shown in the app under Account.
- Correction — you can change your name, profession, and country in the app under Account → Edit profile, and change your email address under Account.
- Deletion — use Account → Delete my account, as described in Section 10.
- Most content rights are exercised directly on your own device, because that is where the content is.
For anything else, contact info@sukonmed.com. You also have the right to lodge a complaint with your local data protection authority.
12. Medical disclaimer
3Diagno is an education, visualization, and clinical-reference tool. It is not a diagnostic device and is not a substitute for professional examination, medical imaging, or independent clinical judgment.
13. Changes to this policy
We may update this Privacy Policy when app features, platform requirements, or data-handling practices change. The current version, with its effective date, will always be available at this URL. Material changes will be reflected in the "Last updated" date above. Continued use of 3Diagno after an update means you accept the revised policy.
14. Contact us
If you have questions about this Privacy Policy or about how 3Diagno handles data:
Sukon Medical Tourism pvt. ltd. Data controller for 3Diagno Developer and publisher: Dr. Faris Arab Mailing address: 605, Ground Floor, Niti Khand-2, Indirapuram, Ghaziabad, Uttar Pradesh, India, 201014 Email: info@sukonmed.com Website: https://sukonmed.com