Privacy Policy

Healthy4U processes personal data in accordance with applicable data protection laws, including GDPR where applicable.

1. Data We Collect

We collect three types of information:

2. How We Use Your Data

We process your data for the following purposes:

• Providing and securing the Service
• Supporting clinics and patients with technical assistance
• Improving service functionality and user experience
• Meeting legal and compliance obligations
• Communicating important service updates

3. Data Sharing Practices

Information may be shared with:

• Authorized Clinics and Clinicians: Healthcare providers you grant access to
• Infrastructure Providers: Hosting and cloud service providers
• Payment Processors: For subscription billing and payment processing
• Legal Requirements: When required by law or to protect rights and safety

4. Your Rights

Users may request:

• Access: View what personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request removal of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to certain data processing activities

To exercise these rights, contact us at [email protected].

5. Data Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Health data is retained according to clinic policies and applicable healthcare regulations.

7. Data Processing Agreement

When clinics upload patient data, Healthy4U functions as a data processor while the clinic acts as the data controller. We commit to:

• Processing data only per clinic instructions
• Implementing appropriate security measures
• Assisting with data subject rights requests
• Notifying of data breaches promptly
• Deleting or returning data upon contract termination

A complete Data Processing Agreement (DPA) is available upon request via [email protected].

8. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place to protect your data during such transfers.

9. Cookies and Tracking

We use cookies and similar technologies to improve service functionality and user experience. You can control cookie preferences through your browser settings.

10. Children's Privacy

The Service is not intended for individuals under 16 years old without parental consent. We do not knowingly collect data from children below the applicable digital consent age.

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or service notification. Continued use of the Service after changes constitutes acceptance.