- Effective date: 5 October 2026
- App: Osteva — An AI second look at your X-ray (Android package
com.aidoc.thebughex) - Developer: The BugHex, Dubai, United Arab Emirates
- Contact: support@thebughex.com
This policy explains what happens to your information when you use Osteva. We wrote it in plain language. If anything is unclear, email us.
The short version
- You don't need an account. We never ask for your name, email, phone number or location.
- When you analyze an X-ray, the image is sent over an encrypted connection to our analysis service to create your report. Our servers don't save your images.
- For bone X-rays and two-view scans, a smaller copy of the image is also processed by Google's Gemini AI service, which works for us as a service provider.
- Your scan history is saved on your phone, not on our servers. You can delete it at any time.
- No ads, no tracking, no analytics. We don't sell your information.
1. What Osteva does
Osteva lets you take a photo of an X-ray, or choose an X-ray image on your phone, and get an AI report in plain language. The report can include a finding, how confident the AI is, how soon to get it checked, and an optional heat map showing where the AI looked. Osteva is decision support. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Always ask a qualified healthcare professional for medical advice.
2. Information we process
X-ray images you choose to analyze. This happens only when you add an image. When you do, Osteva sends it to our analysis service:
- first for a quick check that it is a clear X-ray;
- then for the analysis itself when you start the scan.
An X-ray is health information, so we treat it with care. Images in HEIC or WebP format are converted to JPEG on your phone first, and very large images are made smaller on your phone.
Scan options you choose. The type of X-ray (for example arm or leg bone, chest, or other), the body area, the sensitivity setting, and whether you want a heat map. These help the AI and are sent with the image.
The image's file name. Your phone sends it with the image. Our service only uses it to label your report and sends it straight back.
The report. Our service creates the finding, confidence, explanation and any marked-up image or heat map, and sends them back to your phone.
Technical information. Like any internet service, our servers and our network provider see your IP address, the time,
and which part of the service was called. The app also sends a basic client name (Dart) with its version, but no device
model and no device identifier.
What we don't collect: your name, email address, phone number, account details, location, contacts, messages, other photos or files, device or advertising identifiers, crash reports or usage analytics. Osteva has no ads and no analytics or tracking tools.
3. How we use it
We use this information only to:
- check the image and create your report;
- send the report back to you;
- keep the service running, secure and working properly.
We don't use your images to train AI models, build profiles or show ads. We don't sell, rent or trade your information.
4. Who else processes it
We use a small number of service providers. They process information only for us and on our instructions:
| Provider | What they do | What they receive |
|---|---|---|
| Our cloud server provider | Runs our analysis server | Everything in §2 while your scan is processed |
| Cloudflare | Secures and delivers traffic to our server | Your requests (encrypted on the way), IP address and technical details |
| Google (Gemini API, a paid service) | Writes the AI description for bone X-rays and two-view scans | A smaller copy of the image (at most 768 pixels) and the body area you chose. No file name, no IP address of yours, no identifiers |
Under Google's terms for its paid Gemini API, Google doesn't use what we send to improve its products. Google may keep it for a limited time to detect abuse and meet legal duties. Chest and "other" single X-rays are analyzed on our own server only.
When you share a report. If you tap Share PDF, you choose the app and the person to send it to. That app's own privacy policy then applies. Osteva doesn't send the PDF anywhere by itself.
We may disclose information if the law requires it. Because we don't keep your images or reports, there is very little we could disclose.
5. How long we keep it
| Information | How long |
|---|---|
| Images, scan options, file name and report on our server | Only in memory while your scan is processed, then discarded. Not saved |
| Technical logs on our server and at Cloudflare (IP address, time, request type, short technical result labels) | For a limited time, for security and fixing problems. Logs don't contain your images |
| Data processed by Google's Gemini API | As set by Google's API terms (see §4) |
| Scan history on your phone | Until you delete it or uninstall the app. Osteva keeps up to 200 scans and removes the oldest after that |
| Temporary copies of images and the shared PDF in the app's cache on your phone | Until Android clears the cache, you clear the app's storage, or you uninstall |
Android backup. Osteva opts out of Android cloud backup and device-to-device transfer, so your scan history is not copied to your Google account or to a new phone.
6. Your choices and deleting your data
- Delete one scan: History → ⋯ → Delete scan.
- Delete all scans: Settings → Delete all scans.
- Remove everything from your phone: uninstall Osteva.
- Camera: you can refuse or later turn off camera access in Android settings and upload images instead.
- Questions or requests: email support@thebughex.com. We aim to reply within 30 days. Because there are no accounts and our server doesn't save images or reports, we normally hold nothing that identifies you, and logs expire on their own.
Depending on where you live, you may have rights to access, correct, delete or object to the use of your information, and to complain to your data protection authority. Contact us and we'll help.
7. Security
All traffic between the app and our service uses encrypted connections (HTTPS/TLS), and so does traffic between our server and Google. Your scan history is kept in Osteva's private storage on your phone, which other apps can't read. No system is perfectly secure, but we keep as little as possible: we don't store your images at all.
8. Children
Osteva is meant for adults aged 18 and over and is not directed at children. If you believe a child has used Osteva, contact us. We don't keep images or reports, so in most cases nothing about them is stored with us.
9. Permissions Osteva uses
| Permission | Why |
|---|---|
| Camera | Only when you tap Take a photo, to photograph an X-ray. The photo is kept in the app's private storage, not your gallery |
| Internet | To send your X-ray to our analysis service and receive the report |
| Vibrate | Small haptic feedback when you tap buttons |
Osteva doesn't ask for access to your photo library. When you upload an image, you pick it in Android's own picker, and Osteva only receives the image you chose.
10. Where your information is processed
Our analysis server may be in a country other than yours, and Cloudflare and Google may process information in other countries too. They protect it under their own security and data protection terms.
11. Medical disclaimer
Osteva's results come from AI and can be wrong. Photo quality, angle and lighting can affect them. A qualified medical professional should review every result before any medical decision. If you are in pain, injured or unwell, seek medical care. Don't wait for an app.
12. Changes to this policy
If we change this policy, we'll update the effective date above. If the change is significant, for example if we start collecting something new, we'll tell you in the app or on our Google Play page before it takes effect.
13. Contact
The BugHex, Dubai, United Arab Emirates.
Email: support@thebughex.com