Privacy Policy

1. Introduction

Curexal ("we", "our", or "us") provides digital healthcare coordination infrastructure. We recognize that healthcare information is deeply personal and sensitive. This Privacy Policy details our commitments regarding the collection, handling, storage, and protection of personal and health data across the Curexal Space platform.

2. Information We Collect

We collect information strictly necessary to facilitate care coordination:

• Identity & Account Data: Full name, verified email address, phone number, and cryptographic password hash.
• Care Episode Data: Chief complaints, consultation timestamps, clinical SOAP notes recorded by attending clinicians, and referral orders.
• Diagnostic Reports: Laboratory test results, diagnostic image files, and pathological findings uploaded by accredited diagnostic partners.
• Technical Metadata: IP address, browser user agent, session cookies, and security audit logs to protect account integrity.

3. How Healthcare Information is Used

Your information is used exclusively to deliver, coordinate, and review your healthcare episodes. We do not engage in behavioral advertising, and we never sell or rent patient data to third party data brokers.

4. Data Sharing & Boundaries

Personal and clinical health information is shared only within the direct care team:

• With the licensed clinician conducting your digital teleconsultation.
• With accredited partner facilities and clinics receiving your referral.
• With diagnostic laboratories processing tests ordered for your episode.
• When explicitly required by applicable law, court order, or public health regulation.

5. Technical Security Safeguards

Curexal implements zero trust architecture:

• All data in transit is encrypted using modern TLS 1.3 cryptographic suites.
• Data at rest is stored in access restricted PostgreSQL databases protected by role based access control (RBAC).
• User passwords are protected with RFC 9106 Argon2id memory hard hashing.
• Immutable audit logs record authentication events and administrative changes.

6. Data Retention

Medical records and care episode data are retained in compliance with clinical record retention requirements established by relevant healthcare authorities in jurisdictions where we facilitate care.

7. Your Rights

Subject to medical record laws, you have the right to inspect your care episode timeline, request rectification of inaccurate personal identity details, and obtain an electronic copy of your consultations and diagnostic reports.

8. Privacy Enquiries

For questions regarding this policy or data protection, please contact our Data Protection Officer at privacy@curexal.space.