Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, password (stored only as a secure hash), and role within the organization.
• Business & case data — information you enter about patient cases, leads, partnerships, hospitals, doctors, tasks, expenses, and related notes. This may include personal information about third parties (for example prospective patients), which you are responsible for entering lawfully.
• Email content — if you connect an email account, we access and process messages from the mailboxes you authorize in order to sync and surface relevant communications within the Service.
• Documents & images — files and photos you upload or capture with your device camera for document review and case management.
• Device & usage data — a device push-notification token (if you enable notifications), app version, and basic technical logs used to operate and secure the Service.
• Biometric preference — if you enable fingerprint/biometric login, your credentials are stored only on your device’s secure keystore. Your biometric data never leaves your device and is never sent to us.

• To provide, operate, and maintain the Service and your account.
• To sync and organize your emails, cases, and business intelligence.
• To generate AI-assisted insights, summaries, and recommendations from the data you provide.
• To send operational notifications (for example task reminders) where you have enabled them.
• To secure the Service, prevent abuse, and comply with legal obligations.

We do not sell your personal information. We share information only with:

• Service providers (sub-processors) that help us run the Service, including cloud hosting, Google Firebase (push notifications), Google OAuth (optional sign-in and email access), and AI processing providers used to generate insights. These providers process data only on our instructions.
• Authorized users within your organization, according to role-based access.
• Legal & safety — where required by law, regulation, legal process, or to protect the rights, property, or safety of GativCare, our users, or the public.

We retain your information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time (see “Your Rights” and our Account & Data Deletion page).

We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS), hashed passwords, role-based access controls, and short-lived access tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access, correct, or update your personal information.
• Request deletion of your account and personal data.
• Object to or restrict certain processing.
• Withdraw consent (for example, disconnect a linked email account or disable notifications).
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us at support@gativcare.com.

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children.

Your information may be processed and stored in countries other than your own. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Material changes may be communicated through the Service.

If you have questions or requests regarding this Privacy Policy or your data, contact us at support@gativcare.com.