Last updated: 6 October 2026 · Applies to the Stethopod app on iPhone and Android.
SlimIoT Technologies Private Limited ("we", "us") makes the Stethopod electronic stethoscope and the Stethopod app. This policy explains what the app collects, why, and what you can do about it. It applies to the app on iOS and Android and to the Stethopod online services at api.stethopod.com.
Account: your email address and a password (stored as a salted hash), or the identity token from Google or Apple when you sign in with them. From Apple we receive only the name and email you choose to share.
Profile (optional): a title, your name, a phone number and a profile photo. You add these yourself; they are kept on this phone only and are not sent to our servers.
Stethopod ID: a random identifier (STH-XXXXXX) created for your account so other users can invite you to listen.
Contacts and invitations: the Stethopod IDs and names you save, and the invitations you send or receive.
Push notification token: a device token from Firebase Cloud Messaging so we can deliver access requests to your phone.
Support and purchase requests: the name, phone number, email and message you enter in the Buy form. To pre-fill the country and city, the Buy form asks ipwho.is or ipapi.co for the country of your IP address and api.zippopotam.us for the place matching your postcode; only the IP address or the postcode is sent, no account data.
Technical data: requests to our servers include your IP address and the app version, kept in short-lived server logs.
Sound from the Stethopod reaches your phone over Bluetooth and stays on the phone unless you choose to share it.
Live sharing: when you tap GO LIVE, the sound is relayed in real time to the people who have the session code. The relay forwards the audio as it arrives and does not store it. A session ends when you tap STOP SHARING or close the app.
Recordings you make in the app are stored only on your phone, in the app's private storage. Recordings made on the device are stored only on the device. We never receive them unless you send them to us yourself.
We do not collect the names of the people you listen to, nor any health information. If you speak a name into a voice note, it stays in that recording on your phone.
To sign you in and keep your account secure.
To let other users find you by Stethopod ID and to deliver access requests.
To answer purchase and support requests.
To keep the service running and to investigate errors. We do not use your data for advertising and we do not sell it.
Service providers that process data for us: our hosting provider for api.stethopod.com (India), Firebase Cloud Messaging (Google) for push notifications, and Google and Apple when you use their sign-in. Each receives only what is needed for its task.
When you invite someone to listen, they see your name (or your email address if you have not set a name) and your Stethopod ID. Your profile photo is never shared.
We disclose data if the law requires it.
Account and profile data: until you delete your account.
Invitations and session codes: a session code lasts while you are live; invitation records are deleted after 1 hour.
Server logs: up to 30 days.
Purchase requests: up to 2 years, for follow-up and warranty.
Delete your account from Profile > Delete account and data in the app, or at https://slimiot.com/stethopod/account-deletion. Your account, saved contacts, invitations, registered devices and notification token are deleted from our servers immediately, and the app signs out. Recordings stay on your phone until you delete them.
Edit or remove your name, phone number and photo from the Profile screen.
Turn off access-request notifications in Profile, or revoke the notification permission in your phone settings.
Block or report another user from your saved contacts in Profile, and block anyone who sends you an access request from the Listen tab.
Ask us for a copy of your data, or a correction, at info@slimiot.com.
Bluetooth: to find and connect to your Stethopod. On iOS this is the only way to reach the device; on Android we request Bluetooth scan and connect without location.
Microphone: only when you record a voice note for a recording. Nothing is recorded otherwise.
Photos: only when you choose a profile picture or a contact picture.
Notifications: to show access requests from other users.
The app is for adults and is not directed at children under 16. We do not knowingly collect data from them.
Connections to our servers and the live relay use TLS. Session tokens expire after 30 days. Passwords are stored only as salted hashes.
We will show the date of the latest change at the top of this policy and, for material changes, in the app.
SlimIoT Technologies Private Limited, India. Email: info@slimiot.com.