COLLECTION OF PERSONAL INFORMATION
Generally some of the Services require us to know who you are so that we can best meet your needs. When you access the Services, or through any interaction with us via emails, telephone calls or other correspondence, we may ask you to voluntarily provide us with certain information that personally identifies you or could be used to personally identify you. You hereby consent to the collection of such information by HopeQure. Without prejudice to the generality of the above, information collected by us from you may include (but is not limited to) the following:
- Contact data (such as your email address and phone number).
- Demographic data (such as your gender, your date of birth and your pin code).
- Data regarding your usage of the services and history of the appointments made by or with you through the use of Services.
- Insurance data (such as your insurance carrier and insurance plan).
- Other information that you voluntarily choose to provide to us (such as information Shared by you with us through emails or letters.
The information collected from you by HopeQure may constitute ‘personal information’ or ‘sensitive personal data or information’ under the SPI Rules.
“Personal Information” is defined under the SPI Rules to mean any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available to a body corporate, is capable of identifying such person. The SPI Rules further define “Sensitive Personal Data or Information” of a person to mean personal information about that person relating to:
- passwords;
- financial information such as bank accounts, credit and debit card details or other payment instrument details;
- physical, physiological and mental health condition.
- sexual orientation.
- medical records and history.
- biometric information.
- information received by body corporate under lawful contract or otherwise.
- visitor details as provided at the time of registration or thereafter.
- call data records.
HopeQure will be free to use, collect and disclose information that is freely available in the public domain without your consent.
Apple Health Data (HealthKit & CareKit)
What we access With your permission, the HopeQure iOS app may read and/or write health and activity data from Apple’s Health app via HealthKit (e.g., steps, heart rate, sleep, workouts, body measurements) and manage care tasks/symptoms via CareKit (e.g., care plans, adherence, symptom logs). We only request the categories needed for the features you choose.
Strict purpose limitation We use Apple Health Data only to deliver the features you request (care plans, insights, progress tracking, clinician guidance) or as you explicitly direct (e.g., sharing with your clinician). We do not use Apple Health Data for advertising, marketing, profiling, or sale; we do not share it with data brokers.
Sharing We do not disclose Apple Health Data to third parties except (a) to service providers strictly necessary to provide the HopeQure service, under contract, or (b) when you explicitly direct us to share (e.g., with your care team).
Storage & iCloud < Apple Health Data may be stored on your device and/or on HopeQure’s secure infrastructure (encrypted in transit and at rest). We do not store Apple Health Data or PHI in iCloud.
Your controls You can grant or revoke Health permissions anytime in iOS Health app → Privacy & Security → Apps → HopeQure. You may request a copy or deletion of Apple Health Data stored by HopeQure via in-app controls or privacy@hopequre.com.
Legal bases For India (DPDPA 2023), we rely on consent/notice; for EU/UK GDPR, Art. 6(1)(a) and 9(2)(a) (explicit consent); where applicable under US HIPAA, we follow HIPAA and any BAA in place.