Privacy Policy
Last updated: January 29, 2025
HIPAA Compliant
Healthcare data protection
End-to-End Encryption
In transit and at rest
Transparent Controls
Full visibility and control
Your Choice
Consent-based sharing
1. Introduction
At Vital Guardian™, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share your personal and health information when you use our kidney health monitoring platform. We are committed to protecting your health information in compliance with HIPAA, GDPR, and other applicable privacy laws.
2. Information We Collect
Personal Information
- Name, email address, phone number, and date of birth
- Account credentials and authentication information
- Emergency contacts and family member information (with consent)
- Insurance information for integration purposes
Health Information
- Kidney function markers (eGFR, uACR) from laboratory results
- Vital signs: blood pressure, heart rate, weight
- Medication information and adherence data
- Symptoms, side effects, and health observations
- Healthcare provider information and care plans
Device and Activity Data
- Wearable device data (steps, sleep, heart rate from Fitbit, Garmin)
- Smart device measurements (water intake, glucose readings)
- App usage patterns and interaction data
- Device connectivity and synchronization logs
3. How We Use Your Information
🎯 Primary Uses
We use your information primarily to provide kidney wellness tracking services, generate AI-powered wellness insights, and facilitate care coordination with your healthcare team.
Service Delivery
- Generate personalized kidney wellness insights based on evidence-based guidelines
- Provide health insights, trends, and wellness guidance
- Facilitate communication between patients, families, and care teams
- Send medication reminders and health alerts
Platform Improvement
- Improve AI algorithms and wellness insight accuracy (using anonymized data)
- Enhance user experience and platform functionality
- Conduct research to advance kidney wellness support (with explicit consent)
4. Information Sharing and Disclosure
🔒 Your Control
We only share your health information with your explicit consent or as required by law. You have full control over who can access your data and for what purposes.
With Your Consent
- Healthcare Providers: Share data with your doctors, nurses, and care team
- Family Members: Designated emergency contacts and caregivers
- Insurance Providers: For wellness program integration and benefits
- Research Studies: Anonymized data for kidney health research (optional)
Service Providers
We may share information with trusted service providers who help us operate our platform:
- Cloud infrastructure providers (with HIPAA Business Associate Agreements)
- Authentication and security services
- Analytics providers (using anonymized data only)
Legal Requirements
We may disclose information when required by law, such as in response to legal process, to protect safety, or to comply with healthcare regulations.
5. Data Security and Protection
Technical Safeguards
- • AES-256 encryption at rest
- • TLS 1.3 encryption in transit
- • Multi-factor authentication
- • Regular security audits
Administrative Safeguards
- • Role-based access controls
- • Employee training programs
- • Incident response procedures
- • Regular compliance reviews
HIPAA Compliance
Vital Guardian™ is designed to be HIPAA compliant. We implement appropriate technical, administrative, and physical safeguards to protect your Protected Health Information (PHI) in accordance with HIPAA Security and Privacy Rules.
6. Your Privacy Rights
🎛️ Your Controls
You have comprehensive rights to control your personal and health information. Access these controls through your account settings or by contacting our privacy team.
Access and Control
- • View all collected data
- • Download your information
- • Correct inaccurate data
- • Delete your account and data
Sharing Controls
- • Manage family access permissions
- • Control healthcare provider sharing
- • Opt-out of research participation
- • Revoke consent at any time
7. Data Retention and Deletion
We retain your information only as long as necessary to provide our services and comply with legal obligations:
- Active Account Data: Retained while your account is active
- Health Records: Retained according to healthcare record requirements (typically 6 to 10 years)
- Research Data: Anonymized data may be retained for research purposes (with consent)
- Account Deletion: Most data deleted within 30 days of account closure
8. International Data Transfers
Your data is primarily stored and processed in the United States. If you are accessing our service from outside the US, your information may be transferred to, stored, and processed in the US where our servers are located and our central database is operated.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide at least 30 days advance notice.
10. Contact Us
If you have questions about this Privacy Policy or your personal information, please get in touch:
Privacy Team
Location: Maryland, USA
Phone: (202) 688-1897
Response time: Within 48 hours