Privacy Policy

We collect the following categories of information:

We use personal information for the following purposes:

• To authenticate your account and provide the Service, including generating your report and supporting report-related features.
• To respond to support requests, send service communications, and notify you about important security or account matters.
• To process payments, verify trial or referral eligibility, and manage related administrative workflows.
• To monitor, maintain, secure, debug, and improve the Service.
• To conduct product research, analytics, and AI improvement using de-identified or aggregated information where practicable.
• To comply with legal obligations, enforce our terms, and protect the rights, safety, and security of users and the business.

We may de-identify and aggregate information so that it no longer reasonably identifies you. We use this type of data to:

• Improve and evaluate our AI models and product features.
• Understand product usage trends and service performance.
• Support internal research, analytics, and business planning.

We aim to remove or reduce direct identifiers before using data in this way, but no de-identification process can be guaranteed to be perfect in every context.

We may share information in the following circumstances:

• Service providers: With vendors that help us operate the Service, such as hosting, analytics, authentication, email delivery, customer support, and payment processing providers.
• Referring doctors or clinics: If you participate in an eligible specialist referral workflow and consent to report sharing, we may send a copy of the relevant report materials to the referring doctor or clinic.
• Legal and compliance reasons: If required by law, court order, subpoena, or to protect rights, property, safety, or the integrity of the Service.
• Business transactions: In connection with a merger, acquisition, restructuring, financing, or sale of all or part of our business.

We do not sell or rent your personal information to third parties.

We store information on systems and with service providers located primarily in the United States. We use administrative, technical, and organizational safeguards designed to protect data, including:

• Encryption in transit and, where supported, at rest.
• Role-based access controls and authentication safeguards.
• System monitoring, logging, and security reviews.
• Data minimization and retention controls.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We retain personal information for as long as reasonably necessary to provide the Service, satisfy legal and operational obligations, resolve disputes, and enforce our agreements.

• Account information: Generally retained while your account is active and for a limited period afterward where needed for security, fraud prevention, backup, or legal compliance.
• Assessment answers and report content: Retained while your account remains active and for backup, support, service improvement, and compliance purposes unless deletion is required.
• De-identified or aggregated data: May be retained longer if it no longer reasonably identifies you.

Some processing is necessary to operate the Service, while other uses depend on your choices.

• By creating an account or using the Service, you acknowledge the collection and use of information as described in this Privacy Policy.
• We seek consent where required by law, including for marketing communications.
• If a specialist referral workflow includes optional report sharing, we will rely on the sharing preference you provide for that workflow.

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of certain personal information.
• Object to or restrict certain processing.
• Request portability of eligible data.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with a regulator or supervisory authority where applicable.

To exercise these rights, contact us at support@mysmartreports.app. We will respond within a reasonable period and may need to verify your identity before completing certain requests.

We aim to honor applicable privacy laws, which may include rights and disclosures under laws such as the California Consumer Privacy Act (CCPA/CPRA) or the General Data Protection Regulation (GDPR), depending on your location and how you use the Service.

The availability of certain rights may depend on local law, exemptions, and our role in relation to particular data.

The Service is not intended for children under 18. We do not knowingly collect personal information directly from children under 18. If you believe a child has provided information to us, contact us and we will investigate and take appropriate steps.

Because we operate using providers in the United States and other locations, your information may be transferred to and processed in countries other than the one where you live. Where required, we use reasonable steps and contractual protections designed to safeguard transferred data.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date on this page and, when appropriate, provide additional notice through the Service or by email.