HaruMD Privacy Policy
Effective date: 2026-06-24
This policy explains how Naat Biotech (the “Company”) handles personal information and data in “HaruMD” (the “App”), a pressure-ulcer (bedsore) documentation app for hospital clinical staff. The App is an assistive tool for clinical documentation and does not replace clinical judgment.
1. Information We Process
- Account information: clinician account ID, name, email, phone number, and affiliated hospital — for sign-in and identity.
- Camera and Photos: accessed only when you capture or select a wound (pressure-ulcer) image to upload. Access occurs solely upon your action.
- Wound images and clinical records: uploaded wound photos and the resulting assessment data (stage, size, depth, necrotic tissue). Patient-identifying information is governed by the hospital's policies.
- Usage data: minimal access and error logs required for the App to function.
2. Purposes
- Capturing/uploading wound photos and recording, viewing, and comparing pressure-ulcer status over time
- Clinician authentication and access control
- Service operation, error diagnosis, and security
3. Data Location and Offline Cache
- Patient photos and analysis results are stored on the server operated by the hospital (on-premise or a server designated by the institution). The Company does not collect or retain patient data on a separate central server.
- For offline viewing, wound photos and records once downloaded may be cached in on-device storage. You can clear the cache in the app settings, and the cache is removed on sign-out.
4. Third Parties and Sale of Data
- The Company does not use personal or patient data for advertising/marketing and does not sell it to third parties.
- Data is processed only as required by law or within the scope of the agreement with the hospital.
5. Retention and Deletion
- Retention and deletion of patient data follow the policies of the hospital holding the data and applicable law.
- Account information is deleted without delay upon account deactivation or once its purpose is fulfilled.
6. Your Rights
- You may request access to, correction or deletion of, and restriction of processing of your account information.
- Rights regarding patient data are exercised through the hospital that holds the data.
7. Security
- Traffic is protected with standard HTTPS (for public domains) and token-based authentication.
- Authentication tokens are kept in the device Secure Store.
8. Contact
- Naat Biotech / Essential Citronnier · Email: lemonaatree@gmail.com