Privacy Policy

Introduction

Diaspora Health ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, mobile application, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. By accessing or using Diaspora Health, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

• Registration Information: Name, email address, password, phone number, date of birth, and other account details
• Health Information: Medical history, medications, allergies, symptoms, pet information, and other health-related data
• Payment Information: Credit card, billing address, and transaction history (processed securely by third-party payment processors)
• Communication Data: Messages, emails, and support inquiries
• Document Uploads: Health records, prescriptions, and medical documents

1.2 Information Collected Automatically

• Usage Data: Pages visited, time spent, clicks, and interactions
• Device Information: Device type, operating system, browser type, IP address, and unique identifiers
• Location Data: General location information (city/state level) based on IP address
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar tracking technologies

1.3 Information from Third Parties

• Healthcare providers (with authorization)
• Insurance companies (for verification purposes)
• Social media platforms (if you choose to connect your account)
• Analytics providers and other service partners

2. How We Use Your Information

• Providing and maintaining the Service and your account
• Processing transactions and sending related information
• Sending promotional communications (with your consent)
• Responding to your inquiries and providing customer support
• Improving, personalizing, and developing new features
• Conducting research, analytics, and business analytics
• Complying with legal obligations and enforcing our agreements
• Protecting against fraud, security threats, and abuse
• With your consent, sharing with healthcare providers for treatment coordination

3. Legal Basis for Processing (GDPR)

For users in the European Union, we process personal data based on:

• Your explicit consent
• Performance of a contract with you
• Compliance with legal obligations
• Protection of vital interests
• Performance of tasks in the public interest
• Legitimate interests pursued by us or third parties

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties.

4.2 Service Providers

We share information with service providers who assist us in operating our website, conducting business, or servicing you. These service providers are contractually obligated to maintain the confidentiality and security of your information.

4.3 Healthcare Providers

With your explicit authorization, we share your health information with physicians and healthcare providers to facilitate your care.

4.4 Legal Requirements

We may disclose your information when required by law, court order, or in response to lawful government requests, provided we notify you when legally permitted.

4.5 Business Transfers

If Diaspora Health is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction.

5. Data Retention

We retain your information for as long as your account is active or as long as necessary to provide our Service. You may request deletion of your account and associated data by contacting us at privacy@diasporahealth.com. Some data may be retained for legal, regulatory, or legitimate business purposes even after account deletion.

6. Data Security

We implement comprehensive security measures including:

• SSL/TLS encryption for data in transit
• AES-256 encryption for data at rest
• Role-based access controls
• Regular security audits and penetration testing
• Employee training and confidentiality agreements
• Incident response procedures
• HIPAA-compliant infrastructure

However, no security system is completely secure. We cannot guarantee absolute security of your information.

7. Your Rights

7.1 CCPA Rights (California Users)

• Right to know what personal information is collected, used, and shared
• Right to delete personal information collected from you
• Right to opt-out of the sale of your personal information
• Right to non-discrimination for exercising your rights

7.2 GDPR Rights (EU Users)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

7.3 HIPAA Rights (All Users)

• Right to access your medical records
• Right to request corrections to your health information
• Right to receive notice of privacy practices
• Right to request restrictions on uses and disclosures
• Right to receive an accounting of disclosures

To exercise any of these rights, please contact us at privacy@diasporahealth.com or use the privacy controls in your account settings.

8. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to enhance your experience, analyze usage, and improve our Service. Most web browsers allow you to control cookies through browser settings. However, some features of our Service may not function properly without cookies.

9. Third-Party Links

Our Service may contain links to third-party websites and services. This Privacy Policy applies only to our Service. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child has provided us with personal information, we will delete such information and terminate the child's account. If you believe we have collected information from a child, please contact us at privacy@diasporahealth.com.

11. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using our Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Service following the posting of revised Privacy Policy means you accept and agree to the changes.