Privacy Policy

Welcome to Heme Heroes ("Heme Heroes," "the App," "the Platform," "we," "our," or "us").

Heme Heroes is a digital healthcare platform designed to support individuals living with thalassemia by providing health record management, treatment tracking, blood transfusion management, appointment scheduling, medication reminders, educational resources, and AI-assisted clinical support.

This Privacy Policy explains how we collect, use, process, store, protect, and disclose your information when you use our mobile applications, web-based administrative dashboard, backend services, artificial intelligence features, and related healthcare services.

By creating an account, accessing, or using Heme Heroes, you acknowledge that you have read, understood, and agree to this Privacy Policy.

1. Scope of this Privacy Policy

This Privacy Policy applies to all components of the Heme Heroes platform, including:

• Patient Mobile Application
• Administrative Mobile Application
• Administrative Web Dashboard
• Backend API Services
• AI-powered healthcare features
• Push notification services
• Website and related services (if applicable)

2. Information We Collect

To provide healthcare services effectively, we may collect the following categories of information.

A. Personal Information

Depending on how you use the Platform, we may collect:

• Full name, Email address, Phone number
• Date of birth, Age, Gender
• Preferred language, Country or region
• Account credentials
• User role (Patient, Parent/Guardian, Healthcare Professional, Administrator)

B. Health Information

Because Heme Heroes is a healthcare platform, users or authorized healthcare professionals may create and manage health records, including:

• Thalassemia diagnosis, Blood group
• Blood transfusion history, dates, and volume
• Hemoglobin (Hb) values, Serum ferritin levels
• Iron chelation therapy, Medication records, Adherence
• Laboratory reports, Medical documents
• Clinical appointments, Hospital and Doctor information
• Treatment plans, Clinical observations, Medical history

Health information is treated as sensitive personal information and is processed with appropriate safeguards.

C. Uploaded Files

Users or authorized healthcare professionals may upload laboratory reports, medical images, and clinical documents. Uploaded files may be securely processed to improve application performance.

D. Device and Technical Information

We may automatically collect device model, manufacturer, operating system, app version, IP address, and performance diagnostics.

E. Notification Information

To deliver reminders, we collect Firebase Cloud Messaging (FCM) device tokens and preferences.

F. Usage Information

We collect information about how you interact with the Platform, including features used, login history, and navigation patterns.

3. How We Use Your Information

We use your information to:

• Create and manage user accounts and authenticate users
• Maintain electronic health records and display medical information
• Schedule appointments and track blood transfusions
• Monitor laboratory values and record medications
• Send medication, blood transfusion, and appointment reminders
• Deliver healthcare notifications and educational content
• Generate AI-assisted clinical insights
• Improve platform performance and maintain system security
• Comply with legal and regulatory obligations

4. Artificial Intelligence (AI) Features

AI features may assist with health trend analysis, treatment adherence support, and clinical decision-support information.

Only the information necessary to provide the requested AI feature is processed. AI-generated information is intended solely as an informational tool and is not medical advice.

5. Legal Basis for Processing

We process information based on your consent, performance of services, provision of healthcare, compliance with legal obligations, and legitimate interests.

6. User Roles and Access Control

Access is restricted according to user roles (Patients, Guardians, Healthcare Professionals, etc.). Unauthorized access is prohibited.

7. Data Storage and Security

We implement safeguards including HTTPS/TLS encryption, JWT authentication, password hashing, and routine updates.

8. Third-Party Services

We use trusted technologies like Firebase, OpenAI, and MySQL infrastructure.

9. System Logs and Monitoring

Logs are used exclusively for security, troubleshooting, and system maintenance.

10. Automated Background Processing

The Platform uses automated services for reminders and alerts.

11. Sharing of Information

We do not sell or rent your information. It is shared only with authorized professionals involved in your care or as required by law.

12. Data Retention

Information is retained only as long as necessary for healthcare services, legal compliance, or security.

13. Children's Privacy

Accounts for minors should be managed by a parent or legal guardian.

14. Your Privacy Rights

You may have the right to access, correct, or request deletion of your information.

15. Account Deletion

You may request account deletion through the app or by contacting us. Some records may be retained for regulatory compliance.

16. Push Notifications

You may disable notifications in device settings, though some features may be affected.

17. Educational Content

Content is for informational purposes only and is not medical advice.

18. International Data Transfers

Information may be stored on secure servers outside your country of residence with appropriate safeguards.

19. Medical Disclaimer

Heme Heroes does not provide emergency services or medical diagnosis. Always consult a professional for medical decisions.

20. Changes to this Privacy Policy

We may update this policy periodically. Continued use constitutes acceptance of updates.

21. Contact Us

22. Consent

By using Heme Heroes, you acknowledge and agree to this Privacy Policy and consent to the collection and use of your information as described.