Breathy ("Breathy," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Platform includes:

• Personal Data: Personally identifiable information, such as your name, email address, phone number, gender, and date of birth, that you voluntarily give to us when you register with the Platform.
• Health Information: Information related to your health, such as medical records, prescriptions, and consultation history, which you provide or is generated during your use of the service.
• Provider Data: Information about healthcare professionals, including their name, qualifications, specialization, registration details, and clinic information.
• Financial Data: Data related to your payments, such as payment method details. We use third-party payment processors (Razorpay, Cashfree) to handle payments, and we do not store your full credit card information.
• Derivative Data: Information our servers automatically collect when you access the Platform, such as your IP address, browser type, and operating system.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Connect patients with Providers.
• Process payments and subscriptions.
• Provide, maintain, and improve our services.
• Communicate with you about appointments, updates, and promotional offers.
• Comply with legal and regulatory requirements.
• Ensure the security of our Platform.

3. Disclosure of Your Information

We do not share your personal or health information with third parties except in the following situations:

• With Your Consent: We may share your information with a specific Provider when you book an appointment.
• Service Providers: We may share your information with third-party vendors who perform services for us, such as payment processing (Razorpay, Cashfree) and cloud hosting (Supabase). These vendors are contractually obligated to protect your data.
• Legal Requirements: We may disclose your information if required to do so by law or in response to a valid request by a legal authority.

4. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. We leverage the security features of our backend provider, Supabase, to store your data securely. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable.

5. Data Retention

We retain your user data and health information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with explicit medical, legal, or regulatory retention guidelines:

• Active Accounts: All profile data, medical entries, and settings are retained during the lifespan of your active account to maintain standard service delivery.
• Closed Accounts & Inactivity: Upon account closure or sustained data deletion requests, your identifiable information is removed from active production databases within thirty (30) days.
• Regulatory Exceptions: Generated medical records, clinical summaries, and digital prescriptions may be held securely in an isolated backup for longer periods if required under local healthcare laws, irrespective of account status.

6. Data Deletion and Your Rights

You have full ownership of your data and are provided mechanisms to control it. You hold the following rights:

• Access and Correction: Review or modify any piece of stored personal information directly inside your user dashboard.
• Data Deletion Request: To request the complete deletion of your account and all associated personal and health data, please email our support team at contact@breathy.com from your registered email address. We will process your complete account teardown manually within thirty (30) days of verified request receipt.

7. Policy for Children

We do not knowingly solicit information from or market to children under the age of 18.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: contact@breathy.com