Privacy Policy

1. Introduction

Welcome to EHCF (Ethical Healthcare Foundation) ("we", "our", or "us"), developed and operated in partnership with MaoSolutions. We are committed to protecting your privacy and ensuring the security and confidentiality of your personal and health vitals data. This Privacy Policy explains how our mobile application collects, uses, processes, stores, and protects information when you use the EHCF Android Application.

By downloading, installing, accessing, or using the EHCF application, you acknowledge that you have read and understood the terms of this Privacy Policy.

2. Application Role & Health Classification

The EHCF Application serves as a digital health tracking, vitals monitoring, and diagnostic device synchronization utility. It enables users and healthcare assistants to log, view, and sync readings from compatible physical diagnostic peripherals (such as blood pressure monitors, glucometers, scales, pulse oximeters, and digital stethoscopes).

3. Information We Collect

To provide personal health tracking, vitals monitoring, and Bluetooth diagnostic device connectivity, we collect the following types of information:

A. Personal Identification Data

• User Profile: Name, age, gender, date of birth, contact number, email address, and unique patient or member identification numbers.
• Demographic Details: Height, baseline weight, target health vitals, and associated health clinic/organization identifiers.

B. Health & Medical Vitals Telemetry

When connected to supported diagnostic instruments or entered manually by authorized personnel, the application records:

• Blood Pressure: Systolic, diastolic, and pulse rate readings.
• Blood Glucose: Glucose concentrations, measurement context (fasting, post-meal), and timestamped markers.
• Blood Oxygen (SpO2): Oxygen saturation percentages and pulse readings.
• Body Composition & BMI: Body weight, calculated BMI, body fat percentage, muscle mass, bone mass, and hydration indicators.
• Hemoglobin: Hemoglobin concentration (Hb) readings.
• Body Temperature: Infrared and digital thermometer temperature readings.
• Digital Stethoscope Auscultation: Auscultation sound recordings (heart, lung, and abdominal sounds) and generated spectrograms transmitted via Bluetooth from compatible electronic stethoscopes.
• Clinical Test Records: Laboratory results, clinician notes, test dates, and diagnostic observation history.

C. Device & Technical Information

• Bluetooth Peripheral Details: Peripheral MAC address, device model name, signal strength (RSSI), battery level, and firmware version of paired diagnostic instruments.
• App Performance & Diagnostics: Smartphone hardware model, Android OS version, crash logs, and localized synchronization timestamps.

4. Device Permissions & Why We Need Them

The application only requests permissions strictly necessary for its core functionality:

5. How We Use Your Information

Collected information is used exclusively for the following purposes:

• Health Monitoring & Trend Tracking: Calculating health indicators (e.g., BMI, cardiovascular trends, blood sugar fluctuations).
• Diagnostic Device Synchronization: Establishing real-time telemetry communication with certified physical health hardware.
• Clinical Record Keeping: Maintaining an organized medical history for the user and their designated healthcare practitioners.
• Application Reliability & Security: Ensuring reliable token-based authentication, debugging application stability, and maintaining data integrity.

6. Data Storage, Security & Retention

• Encryption in Transit: All communications between the mobile application and our cloud infrastructure are secured using industry-standard Transport Layer Security (TLS/HTTPS).
• Local Device Security: Cached health records, test sessions, and device pairings are isolated within sandboxed Android Room/SQLite databases and encrypted preference storage.
• Access Controls: Cloud records are protected by strict role-based access control, cryptographic session tokens, and security audits.
• Data Retention: Health and profile records are retained for as long as your account remains active or as required by applicable health data record-keeping regulations. When no longer required, data is deleted or permanently anonymized.

7. Sharing and Disclosure of Information

Your health data is treated with utmost confidentiality and is disclosed only under the following conditions:

• Designated Healthcare Providers: If your account is registered through or affiliated with a clinic, hospital, or wellness institution, authorized medical staff can review your test logs.
• Secure Cloud Infrastructure: Backend hosting and cloud database infrastructure operating under strict confidentiality and security compliance agreements.
• Legal & Regulatory Compliance: When strictly required by applicable law, court order, or governmental medical regulatory authority.

8. Account & Data Deletion (Your Rights)

You have full control over your personal information and health records, including the right to access, export, correct, and completely delete your data.

9. Children's Privacy

The EHCF application is not intended for independent use by children under the age of 18 without the direct supervision and consent of a parent, legal guardian, or registered healthcare practitioner.

10. Updates to This Privacy Policy

We may revise this Privacy Policy periodically to reflect new diagnostic hardware integrations, regulatory compliance updates, or app features. When modified, the "Last updated" date will be revised. We encourage you to review this policy periodically.

11. Contact Us & Grievance Redressal

If you have questions, feedback, or grievances regarding this Privacy Policy or the handling of your health data, please contact our designated Grievance Officer:

• Organization: Ethical Healthcare Foundation (EHCF)
• Grievance Officer: Data Protection & Privacy Department
• Email: info@ehcf.in
• Website: https://ehcf.in
• Response Window: Grievance inquiries are reviewed and resolved within 30 days of receipt.