Privacy Policy
Your privacy and data security are our top priorities. Learn how we protect your personal and medical information.
Table of Contents
1. Introduction
Iradah Medical Platform ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ADHD assessment platform.
This policy applies to all users of our platform, including healthcare providers and researchers. By using our services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Personal Information
- Account Information: Name, email address, phone number, date of birth
- Medical Information: Assessment results, medical history, treatment records
- Professional Information: License numbers, specializations (for healthcare providers)
- Contact Information: Address, emergency contacts
Assessment Data
- VR Assessment Data: Behavioral observations, reaction times, attention metrics
- Speech Analysis Data: Audio recordings, speech patterns, linguistic features
- Therapy Session Data: Session notes, progress tracking, engagement metrics
- AI Analysis Results: Diagnostic insights, recommendations, risk assessments
Technical Information
- Device Information: Hardware specifications, software versions
- Usage Data: Platform interactions, session duration, feature usage
- Log Data: IP addresses, browser type, access times
3. How We Use Your Information
Primary Purposes
- Assessment Services: Conducting ADHD assessments and providing diagnostic insights
- Treatment Planning: Developing personalized treatment recommendations
- Progress Tracking: Monitoring treatment outcomes and progress
- Clinical Research: Improving assessment accuracy and treatment effectiveness
Secondary Purposes
- Platform Improvement: Enhancing user experience and functionality
- Technical Support: Providing customer service and technical assistance
- Compliance: Meeting legal and regulatory requirements
- Communication: Sending important updates and notifications
4. Information Sharing
We May Share Information With:
- Healthcare Providers: Your treating physicians and clinical team
- Authorized Personnel: Licensed healthcare professionals involved in your care
- Research Partners: Academic institutions for approved research studies
- Service Providers: Trusted third parties who assist in platform operations
We Do NOT Share Information With:
- Marketing companies or advertisers
- Insurance companies without your explicit consent
- Employers or educational institutions
- Unauthorized third parties
Legal Requirements
We may disclose information when required by law, court order, or to protect the rights and safety of our users and the public.
5. Data Security
Technical Safeguards
- Encryption: All data encrypted in transit and at rest using AES-256
- Access Controls: Multi-factor authentication and role-based access
- Network Security: Firewalls, intrusion detection, and monitoring
- Regular Audits: Security assessments and vulnerability testing
Administrative Safeguards
- Staff Training: Regular privacy and security training for all personnel
- Access Management: Strict controls on who can access assessment data
- Incident Response: Comprehensive breach response procedures
- Vendor Management: Security requirements for all third-party services
6. HIPAA Compliance
Iradah is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations.
HIPAA Safeguards
- Administrative Safeguards: Privacy policies, workforce training, access management
- Physical Safeguards: Secure facilities, workstation controls, device management
- Technical Safeguards: Access controls, audit logs, transmission security
Your Rights Under HIPAA
- Right to access your health information
- Right to request amendments to your records
- Right to request restrictions on use and disclosure
- Right to receive an accounting of disclosures
- Right to file a complaint with HHS
7. Your Rights
Access and Control
- View Your Data: Access all information we have about you
- Download Your Data: Export your information in a portable format
- Correct Information: Request corrections to inaccurate data
- Delete Your Data: Request deletion of your personal information
Communication Preferences
- Opt out of marketing communications
- Choose how you receive notifications
- Control data sharing preferences
How to Exercise Your Rights
Contact our Privacy Officer at privacy@iradah.ae or use the contact form on our website.
9. Children's Privacy
Our platform is designed for use by individuals of all ages, including children under 13. We comply with the Children's Online Privacy Protection Act (COPPA).
Parental Consent
- Parental consent required for users under 13
- Parents can review, modify, or delete their child's information
- Special protections for children's data
10. International Data Transfers
Your data may be processed in countries other than your residence. We ensure appropriate safeguards are in place for international transfers.
Safeguards Include:
- Standard contractual clauses
- Adequacy decisions by relevant authorities
- Certification schemes and codes of conduct
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our platform
Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Data Protection Officer
Email: dpo@iradah.ae
Address: Abu Dhabi University, College of Engineering, Abu Dhabi, UAE