1. Who is responsible for your data
MDLSis Soluciones Digitales, CUIT 20-23193486-4, with its address at Av. Pte. J. D. Perón 154, B1663 Muñiz, Provincia de Buenos Aires, Argentina, is the controller of the Vitalinfo database.
For any question about your data, write to hello@vitalinfo.app.
2. What data we keep
- Your account. Your email and your name. If you choose a password, we store it transformed irreversibly (a "hash"): nobody can read it, not even us.
- Your profile, if you fill it in: date of birth, sex, weight, height, medical notes, your usual medication with its times, your blood pressure monitors (type, brand, model and whether it is validated) and the blood pressure goal your doctor gave you, with the date from which it applies, which the report shows next to your averages.
- Your readings: date, time, systolic and diastolic pressure, pulse, the comments you write, which monitor you used and where, and, if you turn it on in Settings, on which arm (left or right).
- Your Logbook: the doses of your medication that you mark (whether you took it or not, and at what time), the ones you note separately, and your notes: a category (meal, physical activity, coffee, sleep, symptom, stress or other), the date, the time and the text you write. The app does not interpret your notes or relate them to your readings.
- Your studies and check-ups, if you enter them: the name and type of each study, the dates on which it was requested, the appointment, when you had it done, when you were given the report and when you went over it with your doctor, the reason, who requested it and where it was done, what you copy from the report and what you want to ask your doctor. If you save a link to the original report, we store it as text: the app never opens it, and never downloads or shows what is on the other side. If you attach the PDF or the photo of the report, we store that file exactly as you uploaded it, with its name and size: the app does not open it, does not read it and does not interpret what it says, and photos are shrunk on your phone before uploading. The app does not interpret the results.
- Your appointments and visits, if you enter them: the specialty, with whom and where, the day and time of the appointment, why you are going and what you want to ask, the day you went or cancelled it, what you note your doctor told you and the medication they prescribed, with its times. That medication becomes your usual medication only if you confirm it. The app does not interpret what you note.
- Your periods: name, dates, comment and the medication of each.
- Your saved questions, if you save any in Explore: the name of each one and what the question is (for example, the days on which your average went over 140), without dates. The app answers it with your readings every time you open it and at the foot of your report; it does not store the answer.
- Your preferences: the clinical guideline used to classify your averages, your time zone, your language and your avatar.
- The links you share and the notes left by whoever opens them: their name and their comment.
- What you write to us in Your feedback: your messages and your replies, the rating you give the app, whether you allow a message to be shown and, if you report that something is not working, from which screen you sent it. The Vitalinfo team reads it, and never sees your readings.
- The devices that receive alerts, if you turn them on: the address that your browser's notification service gave to that device and its public keys, to send it the alert encrypted, and which alerts we have already sent you (of what type and on what date, never the name of the medicine), so as not to repeat them.
- Your companions, if you invite someone: the email address you sent the invitation to, the level you gave them, since when they have accompanied you and the date, not the time or the screen, of the last day they looked at your data. If you accompany someone, the same on that person's side.
- Who entered each piece of data: each reading, dose, note, study, visit and goal records which account entered it, yours or a companion's.
- Your last visit: the date, not the time, of the last day you opened the app.
- Your acceptance of these texts: the version and the date.
Whoever administers Vitalinfo sees the list of accounts: the email, when each was created, whether it confirmed its email and the date of the last visit. They never see your readings, your profile, your periods or anything about your health, not even how many days you have entered.
Your health data is sensitive data under the law. You enter it yourself, voluntarily. Only the email and the name are required to have an account.
3. What we use it for
Only to make the app work:
- to show you your readings;
- to calculate your averages and classify them according to the guideline you chose;
- to draw the charts;
- to put together your report;
- to answer what you write to us in Your feedback and to improve the app with what you ask of us;
- to send you the codes and links to sign in.
We do not use it for advertising, or to build commercial profiles, or for studies of any kind.
4. Who it is shared with
We do not sell, rent or transfer your data: not to laboratories, nor pharmacies, nor health insurers or health plans, nor sponsors, nor anyone. Others see it only in these cases:
- When you decide. If you generate a link for your doctor, whoever has it sees the version of the report that you chose, for the period that you chose, until the link expires or you revoke it. Only if you choose the "Logbook" version do they also see your medication doses, your notes and your visits (never your upcoming appointments), and only if you choose "Studies and check-ups" do they see your studies. They can open the PDF or photo attached to each study only if you ticked "Include attached files" when you generated the link; otherwise they see that it exists, without being able to open it. The link to the original report of a study is never shared. Your saved questions go in the link only if you ticked "Include saved questions" when you generated it: they are copied that day, answered over the period of the link, and if you later save or delete one, that link does not change. You can protect it with a PIN. And if you mark that a message in Your feedback may be shown and the team approves it, the other people who use the app see its text and, only if you ask, your first name; never your email.
- Your companions, the people you invite from Settings › Companions, each with their own account and the level you gave them: with "View", your readings, your medication, your Logbook, your studies, your visits and your report; with "View and record", they can also record your pressure, your doses, notes, appointments and studies; with "View, record and manage", also your periods, your profile and your goal. None of them sees your password, changes your email, deletes your account, adds other companions or generates links for the doctor. No companion sees who else accompanies you. What they record is signed with their name on your screens; the report and the links for the doctor say that a companion entered it, without the name. You can change their level or remove them whenever you want, and what they already recorded stays in your data. The app does not keep copies of your data on a companion's phone.
- Our hosting provider, Duplika, stores the database and sends the emails. It does so only so that the app works.
- Your browser's notification service, if you turn on alerts: Google on Chrome and Android, Mozilla on Firefox, Apple on Safari and the iPhone, or Microsoft on Edge. It delivers the alert to your device. The alert travels encrypted with your device's keys, so that service cannot read it: it knows that an alert arrived at that device, when and how large. We do not give it your name, your email or any other data of yours.
- If a judge orders it or the law requires it.
5. Where and how it is stored
The data lives on a server of Duplika, in un centro de datos operado por Liquid Web LLC en Lansing, Michigan, the United States. By accepting this policy, you give your consent for your data to be stored there. The files you attach to your studies live on that same server, in a folder that the web does not publish: only you open them with your session, or your doctor from a link where you allowed it.
It always travels encrypted (HTTPS). Each account sees only its own data. Passwords, access codes and PINs are stored transformed irreversibly.
A daily backup is made of the data and of the attached files, which is kept for up to 30 days on the server and, encrypted, on a storage device of the controller.
6. How long we keep it
As long as you have your account. If you delete it, your data is deleted from the app at once, also your messages in Your feedback with their replies and the files you attached, and the backups keep it for up to 30 days; after that it disappears on its own.
A file that you remove or replace in a study, or that belongs to a study you delete, leaves the app at once; the backups keep it for up to 30 days.
The record of the alerts we sent you is deleted after 30 days. A device's subscription is deleted when you turn off alerts on it, when you sign out on it, when you sign out the other sessions or change your password (on all your devices), and when the notification service reports that it no longer exists.
The server records each visit (IP address, page and date) for security and to count, anonymously, the installations and how many times the app was used offline.
To prevent abuse, for one day we keep an irreversible fingerprint of each email address to which we send an access code or an invitation to accompany someone, never the address itself.
If an account is removed for misuse (see the terms of use), we keep only an irreversible fingerprint of its email, to prevent it from registering again, and the reason for the removal.
8. Emails
We write to you only so that you can sign in, to look after your account and when the team replies to a message of yours in Your feedback: codes, sign-in links, the confirmation to delete it and the notice that we replied to you, which does not carry the text of the reply. We send no newsletters or advertising.
9. Voice dictation
Vitalinfo does not record audio. If you dictate your readings, the dictation is done by your phone's keyboard, under the privacy policy of whoever provides it.
10. Your rights
- Access. You see all your data in the app, and you can download your readings from Settings › Account › "Download my readings", your logbook from "Download my logbook" and your studies from "Download my studies", or together with the files you attached, in a ZIP, from "Download studies and files".
- Rectification. You correct any data directly in the app.
- Erasure. You delete your account and all your data from Settings › Account › "Delete my account".
You can also ask for any of these things by email at hello@vitalinfo.app. We answer a request for access within 10 calendar days, and one for correction or erasure within 5 working days.
The holder of personal data has the right to exercise the right of access to it free of charge at intervals of no less than six months, unless a legitimate interest is shown, as established in article 14, paragraph 3 of Law No. 25,326. The AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the Control Body of Law No. 25,326, has the power to deal with the complaints and claims lodged by those whose rights are affected by non-compliance with the rules in force on personal data protection.
11. Minors
Vitalinfo is only for people over 18 years old. If we learn that an account belongs to a minor, we delete it.
12. Changes to this policy
If we change something important, we will tell you in the app and ask you to accept the new version. Each version carries its number and its date.