Privacy Policy

CertaCure is a healthcare technology company that develops Hospital Information System (HIS) solutions and mobile health applications for hospitals, clinics, and healthcare providers. Our applications are designed to support clinical workflows, patient management, and healthcare service delivery.

This Privacy Policy applies to all CertaCure mobile applications and services. By using any CertaCure application, you agree to the practices described in this policy.

The information we collect depends on how you interact with our applications. We may collect:

• Personal Identification Information: Name, date of birth, gender, national ID or patient ID number.
• Contact Information: Phone number, email address, and physical address.
• Health & Medical Information: Medical history, diagnoses, prescriptions, lab results, radiology reports, and appointment records — only as required to deliver healthcare services.
• Account Credentials: Username and encrypted password used to access the application.
• Device Information: Device type, operating system version, and app version for technical support purposes.
• Usage Data: Features accessed, timestamps, and session activity logs for improving app performance.
• Push Notification Tokens: Device tokens used to deliver appointment reminders and health notifications.

We use the information we collect to:

• Deliver healthcare services: Display your appointments, medical records, lab results, and prescriptions within the app.
• Send notifications: Remind you of upcoming appointments, prescription pickups, or important health updates.
• Authenticate users: Verify identity when logging in to protect your account.
• Improve our services: Analyze usage patterns to fix bugs and enhance application features.
• Technical support: Diagnose and resolve technical issues reported by users or healthcare providers.
• Compliance: Meet legal and regulatory obligations applicable to healthcare software in the regions we operate.

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• Healthcare Providers: Your data is shared with the hospital or clinic whose system you are using, as they are the data controllers for your medical records.
• Service Providers: Trusted third-party vendors (such as cloud hosting or SMS services) who assist in delivering our services, bound by strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or government regulation.
• Patient Consent: With your explicit consent for any purpose not listed above.

Your data is stored on secure servers managed by CertaCure and/or the healthcare facility operating the system. We implement industry-standard security measures including:

• Encrypted data transmission via HTTPS/TLS.
• Encrypted storage for sensitive health records.
• Role-based access controls limiting who can view patient data.
• Regular security audits and vulnerability assessments.

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We encourage users to keep their login credentials confidential and report any suspected unauthorized access immediately.

We retain your personal and medical data for as long as necessary to fulfill the purposes described in this policy, or as required by applicable healthcare regulations and legal obligations in the jurisdiction of the operating facility.

When data is no longer required, it is securely deleted or anonymized. Account data may be retained for a period after account closure to comply with legal and audit requirements.

Depending on your location and applicable law, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Restriction: Request that we limit how we process your data.
• Objection: Object to processing of your data in certain circumstances.
• Portability: Request a portable copy of your data in a structured format.

To exercise any of these rights, please contact us using the details in the Contact section below.

Our applications are not directed at children under the age of 13. We do not knowingly collect personal information from children without verifiable parental or guardian consent. In healthcare contexts where minors are patients, their data is handled under the authority and consent of their parent or legal guardian and the operating healthcare facility.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the effective date at the top of this page.

We encourage you to review this policy periodically. Continued use of any CertaCure application after changes are posted constitutes acceptance of the updated policy.