Privacy Policy
Your privacy and data security are fundamental to our mission. Learn how we protect, use, and respect your personal health information.
Last Updated: January 15, 2025
1. Introduction
NexGenHealth.io ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, services, and applications.
2. Information We Collect
2.1 Personal Information
- Name, email address, phone number, and contact information
- Date of birth, gender, and demographic information
- Account credentials and user preferences
- Payment and billing information
2.2 Health Information
- Medical history, current health conditions, and symptoms
- Medications, supplements, and treatments
- Biometric data and lab results
- Wearable device data (heart rate, sleep, activity levels)
- Dietary preferences and nutritional information
- Healthcare provider interactions and communications
2.3 Technical Information
- Device information, IP address, and browser type
- Usage patterns, clickstream data, and platform interactions
- Location data (when explicitly authorized)
- Cookies and tracking technologies
3. How We Use Your Information
- Personalized Health Services: Provide AI-powered health recommendations, meal plans, and wellness strategies
- Clinical Decision Support: Assist healthcare providers with evidence-based treatment recommendations
- Research and Development: Advance medical research and improve platform functionality (anonymized data only)
- Communication: Send important updates, health reminders, and educational content
- Platform Improvement: Analyze usage patterns to enhance user experience and service quality
- Legal Compliance: Meet regulatory requirements and respond to legal requests
4. Data Sharing and Disclosure
4.1 Healthcare Providers
With your explicit consent, we may share relevant health information with your designated healthcare providers to support coordinated care and treatment decisions.
4.2 Research Partners
We may share anonymized, aggregated data with research institutions and academic partners to advance medical knowledge and support the MAHA movement's research initiatives. Individual users cannot be identified from this data.
4.3 Service Providers
Trusted third-party service providers who assist with platform operations, data processing, and technical services under strict confidentiality agreements.
5. Data Security and Protection
Security Measures
- Encryption: End-to-end encryption for data transmission and storage
- Access Controls: Role-based access with multi-factor authentication
- HIPAA Compliance: Full compliance with healthcare privacy regulations
- Regular Audits: Third-party security assessments and penetration testing
- Data Minimization: Collection and retention limited to necessary purposes
- Incident Response: 24/7 monitoring with rapid breach response protocols
6. Your Privacy Rights
- Access: Request copies of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data (subject to legal requirements)
- Portability: Export your data in a structured format
- Opt-out: Withdraw consent for specific data uses
- Restrict Processing: Limit how we use your information
7. Cookies and Tracking
We use essential cookies for platform functionality and, with your consent, analytics cookies to improve our services. You can manage cookie preferences through your browser settings or our cookie management tool.
8. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy, typically for the duration of your account plus seven years as required by healthcare regulations. Anonymized research data may be retained indefinitely.
9. International Data Transfers
If you access our services from outside the United States, your data may be transferred to and processed in the US. We ensure appropriate safeguards are in place to protect your information according to applicable privacy laws.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or prominent platform notice at least 30 days before they take effect.
11. Contact Information
For questions about this Privacy Policy or to exercise your privacy rights, contact us:
Email: [email protected]