RADI247 PRIVACY POLICY

1. INTRODUCTION

At RADI247, we are committed to protecting your privacy and safeguarding your health information. As a **HIPAA**-compliant app focused on diabetes, pre-diabetes, and hypertension management, we handle sensitive Protected Health Information (PHI) with the utmost care.

By using the RADI247 app or website, you consent to the practices described in this Policy.

2. INFORMATION WE COLLECT

2.1 Personal Information

• Name, email address, phone number
• Date of birth
• Payment details (for subscriptions)

2.2 Health Data (Protected Health Information - PHI)

• Glucose readings from FDA-approved devices
• Blood pressure measurements
• Weight logs and medication records
• Meal logs, activity data, and symptoms
• Lab results and uploaded documents

3. HOW WE COLLECT INFORMATION

• Directly from you: Registration, data entry, chat sessions
• From devices: Automatic sync from glucometers/BP monitors
• Automatically: Device ID, IP address, app usage
• Third parties: Device manufacturers (with authorization)

4. HOW WE USE YOUR INFORMATION

• Provide real-time monitoring and personalized plans
• Send health alerts and reminders
• Enable 24/7 human support by **Global Health Strategist**
• Generate weekly coaching reports
• Ensure **HIPAA** compliance and security

5. **HIPAA** COMPLIANCE

RADI247 is a **HIPAA-covered entity** for all PHI handling:

5.1 Security Measures

• **AES-256 encryption** (data at rest and in transit)
• **TLS 1.3** for all communications
• **2FA login** (biometric + PIN)
• **24/7 audit logs** and breach detection

5.2 Your **HIPAA** Rights

• Access your complete health records
• Request amendments to your PHI
• Restrict certain uses/disclosures
• Receive breach notifications within 60 days

6. HOW WE SHARE YOUR INFORMATION

• Your consent (e.g., sharing reports with **Global Health Strategist**)
• **HIPAA**-compliant vendors (with Business Associate Agreements)
• Senior Medical Graduates (for personalized advice only)
• Legal requirements (court orders, **HIPAA** mandates)

7. YOUR RIGHTS AND CHOICES (US & CCPA)

• **Access:** View all data in the app anytime
• **Update:** Edit profile and health info
• **Delete:** Request full account removal (6-year retention for PHI)
• **Opt-out:** Disable reminders and non-essential tracking
• **Export:** Download complete health records

California Residents: Additional CCPA rights (opt-out of sales, data portability).

8. **GDPR** RIGHTS FOR EU/UK RESIDENTS

If you are a resident of the European Union or the United Kingdom, you have the following rights under the **General Data Protection Regulation (GDPR)** regarding your personal data:

• **Right to Access (Article 15):** Request a copy of your personal data we hold.
• **Right to Rectification (Article 16):** Request correction of inaccurate data.
• **Right to Erasure ('Right to be Forgotten' - Article 17):** Request the deletion of your personal data.
• **Right to Restriction of Processing (Article 18):** Request that we limit the way we use your data.
• **Right to Data Portability (Article 20):** Receive your data in a portable format.
• **Right to Object (Article 21):** Object to our processing of your personal data in certain circumstances.

To exercise these rights, please contact our Privacy Officer listed in Section 11.

9. DATA SECURITY

• **End-to-end encryption** for all chats
• **Role-based access** (**Global Health Strategists** see only assigned data)
• **Regular penetration testing** and vulnerability scans
• **AWS HIPAA-eligible servers** in the USA

10. CHILDREN'S PRIVACY

The RADI247 app is not intended for children under 13. We do not knowingly collect their data.

11. CHANGES TO THIS POLICY

We may update this Policy. Significant changes will be notified via app/email. Continued use constitutes acceptance.

12. CONTACT INFORMATION