1. Personal Information Collected We collect various types of personal information, including:

• Personal Identifiers: Name, birthdate, phone number, email, shipping address, Patient ID.
• Health & Medical Data: ECG/EKG readings, heart rate, Medical History (as provided)
• Internet & Device Data: IP address, device ID, Browser type, Browsing History, Biometric data
• Geolocation Data: Physical location, local time, and time zone.
• User-Generated Content: Notes, tags, memos linked to ECG recordings.

‍

2. How We Collect Your Information

• Directly from you or your clinician (e.g., account setup, app usage).
• Automatically from device interactions and usage.
• Through third-party integrations (with your consent).

‍

3. How We Use Your Information We use personal information to:

• Operate, maintain, and improve our app and services.
• Provide customized products and services.
• Send account-related notifications and promotional communications (opt-out available).
• Enhance security and prevent fraud.
• Conduct analytics and reporting.
• Comply with legal obligations and respond to law enforcement requests.

‍

4. How We Share Your Information We do not sell your personal information. However, we may share it with:

• Service Providers & Business Partners: Data hosting, analytics, advertising, technology support.
• Healthcare Providers & Family: With your consent, we may share data with your designated medical professionals or family members.
• Legal & Regulatory Authorities: As required by law or legal proceedings.
• Business Transfers: In case of mergers, acquisitions, or company restructuring.

‍

5. Data Security Measures We implement administrative, technical, and physical safeguards to protect your personal information. However, no internet transmission is 100% secure. Our security measures include compliance with HIPAA, SOC 2 Type 2, ISO 27001, Cyber Essentials, and HITRUST certifications. We keep your information for as long as necessary to fulfill the purposes outlined in this policy, unless otherwise required by law. When we have no ongoing business needs to process your personal information (e.g. account termination), we will either delete or anonymize such information.

‍

6. How Long Do We Keep Your Information: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law. When we have no ongoing legitimate business need to process your personal information (e.g., account termination), we will either delete or anonymize such information.

‍

7. Your Choices & Rights

• You can opt out of marketing communications.
• You can control data sharing with third-party apps.
• You have the right to access, update, or delete your personal data (subject to legal constraints).
• To exercise these rights, you can contact us at: Support@heartbeam.com

‍