Privacy Policy

Last Updated: September 2025

1. Introduction

KardiaSync ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cardiac monitoring platform and related services.We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

Name, email address, and contact information
Organization and professional details
Account credentials and authentication data

2.2 Health Information

With explicit consent, we collect cardiac health data from connected wearable devices and medical equipment, including:

Heart rate and rhythm data
Blood pressure measurements
ECG recordings
Activity and sleep patterns

2.3 Technical Information

Device information and identifiers
IP address and location data
Usage patterns and analytics
Log files and system information

3. How We Use Your Information

We use collected information for:

Providing cardiac monitoring and risk analysis services
Generating insights and alerts based on longitudinal dataImproving our platform and developing new features
Communicating with healthcare providers and users
Ensuring security and preventing fraud
Complying with legal and regulatory requirements

4. Data Sharing and Disclosure

We do not sell your personal or health information. We may share data with:

Healthcare providers involved in your care (with consent)
Service providers supporting our platform operations
Legal authorities when required by law
Research partners (only with de-identified data and consent)

5. Data Security

We implement industry-standard security measures including:

Encryption of data in transit and at rest
Role-based access controls
Regular security audits and monitoring
Secure cloud infrastructure with Canadian data residency
Employee training on data protection

6. Your Rights

Under Canadian privacy law, you have the right to:

Access your personal and health information
Correct inaccurate information
Withdraw consent for data processing
Request deletion of your data (subject to legal requirements)
File a complaint with the Privacy Commissioner of Canada

7. Data Retention

We retain personal and health information for as long as necessary to provide services and comply with legal obligations. Retention periods vary based on data type and applicable regulations.

8. International Data Transfers

Your data is primarily stored in Canada. If international transfers are necessary, we ensure appropriate safeguards are in place to protect your information.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect information from minors without parental consent.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through our platform or via email.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at:
Email: privacy@kardiasync.com
‍Address: 1725, 16th Ave, Richmond Hill, ON