Privacy Policy

1. Introduction

Symptek ("we," "our," or "us") is committed to protecting your privacy and the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our symptom tracking application and related services.

Important: This Privacy Policy applies to all users of Symptek, and by using our Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Name and email address (for account creation and communication)
• Profile information (optional)
• Authentication credentials (securely hashed)
• Account preferences and settings

2.2 Health Information

We collect health-related information that you voluntarily provide:

• Symptom descriptions and severity levels
• Symptom duration and timing
• Trigger factors and environmental conditions
• Medication information and dosages
• Health notes and observations
• Correlation data between symptoms and triggers

2.3 Usage Information

We automatically collect certain information about your use of the Service:

• Device information (browser type, operating system)
• IP address and general location
• Usage patterns and feature interactions
• Error logs and performance data

3. How We Use Your Information

3.1 Service Provision

• Provide and maintain the Symptek application
• Process your symptom logs and generate insights
• Create correlation analyses and trend reports
• Personalize your experience and recommendations
• Send important service notifications

3.2 Communication

• Send account verification emails
• Provide password reset functionality
• Respond to your support requests
• Send service updates and announcements (with your consent)

3.3 Analytics and Improvement

• Analyze usage patterns to improve our service
• Develop new features and functionality
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal health information to third parties. We may share your information only in the following limited circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our service:

• Database hosting and management
• Email service providers (for notifications)
• Analytics and monitoring services
• Customer support platforms

All service providers are contractually bound to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal requests or court orders
• Government investigations
• Protection of our rights or safety
• Prevention of fraud or security threats

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. We will notify you of any such changes and ensure your privacy rights are protected.

5. Data Security

We implement comprehensive security measures to protect your sensitive health information:

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict access controls limit who can view your health data
• Authentication: Multi-factor authentication and secure password requirements
• Regular Audits: Security audits and vulnerability assessments
• Data Backups: Regular secure backups with encryption
• Employee Training: Staff training on data protection and privacy

Despite our security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to certain processing activities

To exercise these rights, please contact us at privacy@symptek.io. We will respond to your request within 30 days.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will:

• Delete your personal information within 30 days
• Retain certain information for legal compliance (e.g., tax records)
• Maintain anonymized data for analytics and service improvement

We may retain certain information longer if required by law or to protect our legal rights.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze usage patterns and improve our service
• Provide personalized features
• Ensure security and prevent fraud

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our service.

9. Children's Privacy

Symptek is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification
• Displaying a notice in the application

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

We are committed to addressing your privacy concerns and will respond to your inquiry within a reasonable timeframe.