Privacy Policy

Effective Date: January 15, 2024

Health Information Management Systems built the AxiaGram app as a Commercial healthcare management application. This SERVICE is provided by Health Information Management Systems and is intended for use as is.

This Privacy Policy is used to inform users regarding our policies with the collection, use, and disclosure of Personal Information and sensitive user data when using our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at AxiaGram unless otherwise defined in this Privacy Policy.

Information Collection and Use

To provide and improve our Service, we may collect and use the following types of information:

Personal Information

• Contact Information: Name, email address, phone number, and other contact details you provide when creating an account or contacting us for support.
• Healthcare Information: Medical records, treatment plans, prescriptions, assessments, and other health-related data necessary for providing healthcare services.
• Demographic Information: Age, gender, address, and other demographic data relevant to healthcare services.
• Authentication Data: Username, password, and other credentials used to access the Service.

Device and Technical Information

• Device Information: Device model, operating system version, unique device identifiers (UDID, IMEI, Android ID), mobile network information, and device settings.
• Location Data: GPS coordinates, IP address, and location-based services data when location services are enabled.
• Usage Analytics: Information about how you use our Service, including features accessed, time spent in the app, and interaction patterns.
• Technical Logs: IP addresses, browser type, access times, and other technical data for security and performance monitoring.

Sensitive Data Categories

• Health Information: Protected Health Information (PHI) as defined by HIPAA, including medical diagnoses, treatments, and health records.
• Biometric Data: Voice recordings, signatures, and other biometric identifiers when using voice features or digital signatures.
• Calendar Information: Appointment schedules, reminders, and calendar events when calendar access is granted.
• Communication Data: Chat messages, voice calls, and other communications within the app.

How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our healthcare management services
• Communication: To respond to inquiries, provide support, and send important service updates
• Personalization: To customize the user experience and provide relevant healthcare information
• Security: To ensure the security and integrity of our Service and protect against fraud
• Compliance: To comply with legal obligations, including healthcare regulations
• Analytics: To analyze usage patterns and improve our Service functionality
• Emergency Services: To provide emergency assistance when necessary

Data Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers

We may employ third-party companies and individuals to:

• Facilitate our Service
• Provide the Service on our behalf
• Perform Service-related services
• Assist us in analyzing how our Service is used

These third parties have access to your Personal Information only to perform tasks assigned to them on our behalf and are obligated not to disclose or use the information for any other purpose.

Legal Requirements

We may disclose your information when required by law, court order, or government regulation, including:

• Healthcare compliance requirements (HIPAA, HITECH)
• Law enforcement requests
• Public health emergencies
• Legal proceedings

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

With Your Consent

We will share your information with third parties only with your explicit consent, except as described in this policy.

Third-Party Services

The app uses third-party services that may collect information used to identify you:

Google Play Services

• Purpose: Analytics, authentication, and app functionality
• Data Collected: Device information, usage analytics, and authentication data
• Privacy Policy: Google Privacy Policy

Calendar Access

We collect your calendar information from your devices with your permission. You can grant or revoke this permission at any time in your device's settings. We only collect calendar information that is relevant to our services, such as events, dates, and times.

How we use calendar information:

• Provide personalized appointment reminders and scheduling
• Improve service functionality and user experience
• Develop new features and capabilities

How we protect calendar information:

• Encrypt data in transit and at rest
• Store on secure servers with access controls
• Retain only as long as necessary for service provision

Your rights regarding calendar information:

• Access, update, delete, or export your calendar information
• Contact us at kmaskari@hmsfirst.com for data management requests

Log Data

We want to inform you that whenever you use our Service, in case of an error in the app, we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol ("IP") address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Cookies and Tracking Technologies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

This Service does not use "cookies" explicitly. However, the app may use third-party code and libraries that use "cookies" to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Data Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. We implement appropriate technical and organizational measures to protect your data, including:

• Encryption: Data is encrypted in transit and at rest using industry-standard encryption protocols
• Access Controls: Strict access controls and authentication mechanisms
• Regular Security Audits: Periodic security assessments and vulnerability testing
• Employee Training: Regular privacy and security training for our staff
• Incident Response: Procedures for responding to security incidents

However, remember that no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Data Retention

We retain your personal information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Healthcare information is retained in accordance with applicable healthcare regulations and legal requirements. You may request deletion of your data, subject to legal and regulatory requirements.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your personal information
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at kmaskari@hmsfirst.com.

Children's Privacy (COPPA Compliance)

Our Service is designed for users of all ages, including children under 13. We take extra precautions to protect the privacy of young users and comply with the Children's Online Privacy Protection Act (COPPA):

Special Protections for Children Under 13

• Parental Consent: We do not knowingly collect personal information from children under 13 without verifiable parental consent
• Minimal Data Collection: We do not require children to provide more personal information than is reasonably necessary to use our Service
• Limited Sharing: We do not share children's personal information with third parties except as necessary to provide our Service, comply with law, or protect the safety of our users
• No Behavioral Advertising: We do not use children's information for behavioral advertising or tracking
• Parental Rights: Parents and legal guardians have the right to:
•   1. Review their child's personal information
•   2. Request deletion of their child's information
•   3. Refuse further collection or use of their child's information
•   4. Revoke consent at any time

Parental Controls and Contact

Parents and legal guardians can review, update, or request deletion of their child's personal information by contacting us at kmaskari@hmsfirst.com. We will respond to parental requests within 30 days.

Age Verification

We implement reasonable measures to verify parental consent when collecting information from children under 13, including:

• Requiring parental consent forms
• Verifying parent identity through multiple methods
• Providing clear notice about data collection practices

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Sending you an email notification (if you have provided an email address)
• Displaying a notice in the app

You are advised to review this page periodically for any changes. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

This policy is effective as of January 15, 2024

Contact Us

If you have any questions or suggestions about our Privacy Policy, or if you need to exercise your privacy rights, please do not hesitate to contact us:

Email: kmaskari@hmsfirst.com

Address: Health Information Management Systems

Response Time: We will respond to your inquiries within 30 days

For privacy-related complaints, you may also contact your local data protection authority.