Privacy Policy

1. Introduction

Welcome to CardioVitals (“we,” “us,” or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, CardioVitals (the “App”), our website (www.cardiovitals.com) (the “Site”), or other services (collectively with the App and the Site, the “Services”).

Please read this Privacy Policy carefully. We provide this policy to help you make an informed decision about using our Services. Our Services are intended for users in the United States.

2. Information We Collect

We may collect various types of information about you. The information we may collect via our Services include:

Personal Data You Provide to Us:

• Required Information: To create an account and use the core features of our Services including the App, you must provide your:
  • Email Address
  • Phone Number
  • Daily Weight Data
• Required Information: For us to share your information with your healthcare provider, you must provide your:
  • Provider Name
  • Provider Contact Information
• Optional Information: You may also choose to provide:
  • First Name
  • Last Name

Data Collected Automatically: We may automatically collect standard application log information, which may include your device type and usage information, to help us improve our Services.

3. How We Use Your Information

We use the information we collect primarily to provide, maintain, and improve our Services. Specific uses include:

• To create and manage your account.
• To enable you to log and track your daily weight.
• To monitor your weight data in relation to your “dry weight” range.
• To facilitate the connection and sharing of your data with your chosen healthcare provider.
• To send you technical notices, updates, and security alerts.
• To respond to your comments, questions, and requests, including data deletion requests.

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties.

We may share information we have collected about you in the following situations:

With Your Healthcare Provider: The primary function of the App is to help you share your weight data with your healthcare provider.

When you use the “Provider Connection” feature to search for and connect with your healthcare provider, you are expressly directing us, and providing your consent, to share your information (including your name, email, phone number, and weight data) with that provider and other clinical professionals within their practice or affiliated network to facilitate continuity of care and team-based monitoring.

We are not responsible for the privacy practices of your healthcare provider.

As Required by Law: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (a) comply with a legal obligation, (b) protect and defend our rights or property, or (c) protect the personal safety of users or the public.

5. Data Security

We use administrative, technical, and physical security measures to help protect your personal information.

We utilize robust, industry-standard security measures, including a method called Field-Level Encryption (FLE). All sensitive patient-provided PII (e.g., name, email, phone) and health data (e.g., weight) are stored using a method called envelope encryption and secured by our cloud-hosting vendor security tools to protect data at rest.

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable.

6. Data Retention

We will retain your personal information securely for a period of up to one year from the date of your last activity on our Services, or until you request its deletion. After this period, your personal data will be securely and permanently deleted. You acknowledge that any information held by your healthcare provider may be subject to a longer retention period.

7. Your Rights and Choices

You have certain rights regarding your personal information:

• Access and Update: You can review and update your account information (such as name and email) at any time within the App’s settings.
• Data Deletion: You may request the deletion of your account and all associated data at any time by contacting us at support@cardiovitals.com. We will process your request in a timely manner.

8. Children’s Privacy

Our Services are not intended for or directed at individuals under the age of 18 (“minors”). We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us, and we will take steps to delete such information.

9. HIPAA and Medical Disclaimer

Our Application is not a “covered entity” under the Health Insurance Portability and Accountability Act (HIPAA). The data you provide to us is not considered Protected Health Information (PHI) under HIPAA regulations as it pertains to our App.

However, when you use our Services to share your information with your healthcare provider, that information will be protected as PHI under HIPAA. Our Services serve as a tool to facilitate this data transfer at your direction.

10. Contact Us

If you have any questions or comments about this Privacy Policy, please contact us at: CardioVitals, LLC, support@cardiovitals.com.

11. Updates

We may revise or update this Privacy Policy at any time. When we make changes to this Privacy Policy, we will post the updated Privacy Policy on www.cardiovitals.com and update the effective date. Any changes will be effective as of the “Effective Date”. Your continued use of our Services following the posting of changes constitutes your acceptance of such changes.