Privacy Policy

Personal Identifiable Information (PII):

• Name
• Email address
• Phone number
• Physical address

Health Information:

• Medical records retrieved on your behalf.
• Self-reported data, including symptoms, health goals, or family medical history.
• Data shared through connected devices, wearables, or third-party platforms (e.g., fitness trackers).

Usage Data:

• Device type and operating system.
• Browser type.
• IP address and geolocation (if enabled).
• Behavioral data, such as pages visited, features used, and time spent on the platform.

Third-Party Data Sources:

With your explicit consent, we may collect additional information from third-party sources, such as:

• Healthcare providers.
• Diagnostic laboratories.
• Partnered platforms or applications.

Direct Input:

Data you provide directly, such as during registration, profile creation, or survey completion.

Automated Technologies:

Data automatically collected via cookies, analytics tools, and similar technologies.

Third-Party Integrations:

Information retrieved from external platforms, such as healthcare portals or device APIs, with your authorization.

Service Delivery

• Enable personalized health insights, tools, and recommendations.
• Securely retrieve and integrate medical records with user authorization.
• Facilitate core functionalities of the platform.

User Support and Communication

• Respond to inquiries, troubleshoot issues, and provide customer support.
• Send updates related to the Services, such as changes to terms, policies, or features.

Research and Development

• Aggregate and anonymize data to improve platform features and develop new functionalities.
• Conduct internal analysis to enhance user experience and product effectiveness.

Legal Compliance

• Fulfill legal obligations, such as responding to lawful requests or regulatory requirements.
• Ensure compliance with data protection laws like HIPAA, GDPR, and CCPA.

Security and Fraud Prevention

• Monitor usage for suspicious activity, unauthorized access, or breaches.
• Protect the platform and user accounts from malicious threats.

With Your Explicit Consent

Data will only be shared with third parties, such as healthcare providers or diagnostic services, when you provide explicit authorization.

Service Providers and Partners

• Data storage and hosting providers.
• Analytics and research partners.

These partners are contractually obligated to adhere to the same privacy and security standards as Curanostics.

Legal and Regulatory Requirements

We may disclose data to comply with applicable laws, regulations, or legal processes, including:

• Responding to subpoenas, court orders, or other lawful requests.
• Cooperating with regulatory or law enforcement agencies.

Anonymized and Aggregated Data

Non-identifiable data may be shared for research, publication, or statistical purposes.

Encryption

All sensitive data, including medical records, is encrypted during storage and transmission using robust encryption protocols.

Access Controls

Access to your data is restricted to authorized personnel and requires multi-factor authentication.

Continuous Monitoring

We actively monitor the platform for potential security threats and vulnerabilities.

Right to Access

You have the right to request a copy of the personal data Curanostics holds about you.

Right to Rectification

You can request corrections or updates to inaccurate or incomplete information.

Right to Deletion

You may request the deletion of your personal data, subject to limitations such as legal obligations to retain certain information.

Right to Restrict Processing

You can request that we limit the use of your data in certain situations, such as during dispute resolution.

Right to Data Portability

You have the right to request a copy of your data in a structured, commonly used, and machine-readable format for transfer to another provider.

Right to Object

You may object to the processing of your data for specific purposes, such as direct marketing or automated decision-making.

General Data Protection Regulation (GDPR)

For users located in the European Economic Area (EEA), we process personal data in accordance with GDPR. This includes:

• Providing clear and transparent information on data processing.
• Offering rights such as data access, correction, deletion, and portability.

Other Regional Laws

We also adhere to other regional regulations, such as the California Consumer Privacy Act (CCPA) for users in California and other equivalent frameworks.

Storage in the U.S.

Your personal data may be transferred to, stored, or processed in the United States, where data protection laws may differ from your jurisdiction.

Safeguards for Transfers

• Standard contractual clauses (SCCs).
• Ensuring compliance with applicable legal requirements.

Language and Localization

Where applicable, we will provide localized versions of our Privacy Policy and Terms of Service to meet specific jurisdictional requirements.

Exercise of Rights

Users outside the U.S. may exercise their data rights by contacting yash@curanostics.health, and we will ensure compliance with relevant local laws.

Your Rights Under the CCPA

How to Exercise Your CCPA Rights

To exercise any of these rights, contact us using one of the following methods:

• Email: yash@curanostics.health
• Phone: +1 512-785-1814
• Online Form: https://www.quickbridge.com/ccpa/personal-information-request-form.pdf

We will verify your identity before processing your request. You may also designate an authorized agent to act on your behalf by providing written permission or a power of attorney.

Categories of Personal Information We Collect Under CCPA

Curanostics collects the following categories of personal information as defined by the CCPA:

• Identifiers: Name, email, phone number, account credentials.
• Personal Information Categories: Medical records, health history, and related data.
• Internet Activity: Browsing history, device information, and interactions with our website.
• Geolocation Data: Only when explicitly enabled by you.
• Professional or Employment Information: If relevant to your use of the Services.

Access and Portability

The right to access personal information collected about you and request its transfer in a portable format.

Correction of Inaccurate Data

The right to request corrections to your personal data if it is incorrect or incomplete.

Opt-Out of Targeted Advertising or Profiling

The ability to opt out of data processing for targeted advertising or automated profiling.

Sensitive Information

The right to restrict the processing of sensitive data, such as health or biometric information, to only necessary purposes.

Data Mapping and Transparency:

Maintaining an up-to-date record of the data we collect, its sources, and how it is processed.

Universal Access to Rights:

Extending comparable rights, such as those under the CCPA, to users in other states to simplify compliance and ensure consistency.

Notice of Financial Incentives:

If any financial incentives are offered (e.g., discounts in exchange for data), we will provide clear terms and obtain your explicit consent.

Right to Access

You have the right to request access to the personal data we hold about you and obtain information about how it is processed.

Right to Rectification

You can request corrections to inaccurate or incomplete personal data.

Right to Erasure (Right to Be Forgotten)

You may request the deletion of your personal data, provided it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.

Right to Restrict Processing

You can request that we limit the processing of your personal data under certain circumstances, such as when you contest its accuracy or object to its processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and request its transfer to another data controller.

Right to Object

You can object to the processing of your data for direct marketing purposes or where processing is based on legitimate interests.

Right to Withdraw Consent

If you have provided consent for data processing, you can withdraw it at any time without affecting the lawfulness of prior processing.

Right to Lodge a Complaint

If you believe your rights have been violated, you have the right to file a complaint with your local data protection authority.

Legal Basis for Data Processing

We process personal data under the following legal bases:

• Consent: When you explicitly provide consent for specific data processing activities.
• Contractual Necessity: To deliver services you have requested, such as personalized health insights.
• Legitimate Interests: For purposes like improving our platform and ensuring security, provided they do not override your rights and freedoms.
• Legal Obligations: To comply with applicable laws and regulatory requirements.

Data Protection Principles

We adhere to the following principles in processing personal data:

• Lawfulness, Fairness, and Transparency: Data processing is conducted transparently and in compliance with the law.
• Purpose Limitation: Data is collected only for specific, explicit, and legitimate purposes.
• Data Minimization: Only data necessary for the stated purposes is collected.
• Accuracy: We strive to ensure all personal data is accurate and up to date.
• Storage Limitation: Data is retained only as long as necessary for its intended purposes or as required by law.
• Integrity and Confidentiality: Robust security measures are implemented to protect your data.

Periodic Updates

Curanostics may update this Privacy Policy periodically to reflect changes in legal requirements, our data practices, or the functionality of our Services. Any changes will be effective upon posting, with the "Last Updated" date revised accordingly.

User Notification

For significant changes, we will notify users via:

• Email to the address associated with your account.
• Prominent notices within the Services.

Continued use of the Services after updates constitutes acceptance of the revised policy.

Your Responsibility to Review

You are responsible for reviewing this Privacy Policy periodically to stay informed about how we are protecting your information.