1. Introduction

BioTrace ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our health tracking service.

2. Data Processing Location

Your personal data, including health information, is processed and stored on servers located in the Republic of South Africa. By using BioTrace, you consent to your data being processed and stored in South Africa.

While BioTrace is not subject to the European Union's General Data Protection Regulation (GDPR), we are committed to providing GDPR-like protections for your data. South African data protection laws, including the Protection of Personal Information Act (POPIA), govern the processing of your personal data.

3. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: Email address, name, and password
• Profile Information: Profile names and types (adult, child, infant, pet)
• Health Data: Blood pressure readings, heart rate, glucose levels, and weight measurements
• Usage Data: How you interact with the Service, including dates and times of readings

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Send you health reports and notifications you request
• Authenticate your identity and secure your account
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends

5. Information Sharing

We do not sell, rent, or share your personal health information with third parties, except:

• When you explicitly request us to share (e.g., sending reports to your doctor via email)
• With service providers who assist in operating our Service (e.g., email delivery)
• When required by law or to protect our legal rights

6. Your Rights (GDPR-Like Protections)

We provide the following data rights to all users:

• Right to Access: You can view all your personal data at any time through your account
• Right to Export: You can download all your data in JSON format at any time
• Right to Rectification: You can update or correct your data through your account settings
• Right to Erasure: You can delete your account and all associated data at any time
• Right to Data Portability: Your exported data is in a standard, machine-readable format

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using HTTPS/TLS
• Secure password storage using industry-standard hashing
• Two-factor authentication (email OTP) for account access
• Regular security assessments and updates

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. When you delete your account, all your personal data and health readings are permanently deleted from our systems within 30 days.

9. Children's Privacy

Our Service is not directed to children under 13. While you may create profiles to track health data for children, account holders must be 18 years or older. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@biotrace.center.