Privacy policy

What data we collect

• Website: the details you send when you contact us by WhatsApp or email (name, phone, message). The website has no forms for sending test results.
• Patient app (pilot phase, by invitation): account data (name, email) and health data you choose to upload —reports, blood tests, ECG, Holter, blood pressure, medications, family history— always with your explicit consent.
• Minimal technical data needed to run the app securely (session, access logs).

How we use it

• To answer your messages and book appointments.
• So your cardiologist can review and validate your tests and show you the results explained.
• To keep a history of your tests and follow-up.
• We do not use it for advertising or sell it to third parties.

Legal basis and consent

Health data is processed only with your explicit, free and informed consent, given before your first upload. You may withdraw it at any time; this does not affect earlier processing. WhatsApp or email contacts are processed to answer your request.

Where it is stored

On servers of a cloud infrastructure provider, with encrypted connections and per-user access control. Files are kept in private storage and open only through temporary links that expire after 10 minutes. Servers may be located outside Paraguay; the provider applies appropriate security measures.

Uploaded reports are read by an automated AI reading service that processes the file only to extract the values. Each value is confirmed before saving and validated by the doctor.

Who can access it

• You, your own data.
• Your cardiologist, Dr. Rebeca Granada, her patients' data.
• The app's technical administrator has no access to patients' clinical data; their actions are logged.
• No one else, unless required by law.

How long we keep it

While your account is active. If you delete your account, your app data is erased, except what the law requires us to keep. WhatsApp or email messages are kept as long as needed to help you.

Your rights

• Access: view and download your data.
• Rectification: correct inaccurate data.
• Erasure: delete your data and account.
• Objection: object to a specific use.
• Withdrawal of consent, at any time.

You can exercise them from Profile in the app (export or delete account) or by writing to the contact above. We will respond within the legal deadlines.

Applicable law

Paraguay Law No. 7,593/2025 on Personal Data Protection.

For patients living in Brazil or using telehealth from Brazil, also Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

Emergencies

The website and app are not emergency channels. In an emergency in Paraguay, call SEME 141 or 911.