Cardio Bond policy

Privacy Policy for CardioBond

Effective Date: 16 Apr 2026

1. Introduction

CardioBond is a digital health platform designed to support cardiac rehabilitation and secondary prevention for patients following a cardiac event. This Privacy Policy explains how we collect, use, store, and protect your personal and health information.

By using CardioBond, you agree to the practices described in this policy.

2. Information We Collect

We may collect the following types of data:

a. Personal Information

• Name, age, gender
• Contact details (phone number, email)
• Location (for contextual care support)

b. Health & Medical Data

• Medical history (cardiac events, procedures, such as CABG/PCI)
• Vital parameters (blood pressure, weight, HbA1c, lipid profile)
• Medication adherence data
• Physical activity and lifestyle habits

c. Behavioral & Usage Data

• App usage patterns
• Engagement with rehabilitation content
• Responses to interventions (Actionable Decision Elements)

3. Purpose of Data Collection

Your data is collected to:

• Deliver personalized cardiac rehabilitation programs.
• Monitor patient adherence and health progress.
• Enable clinicians to provide timely interventions.
• Improve platform usability and effectiveness.
• Conduct research (only with consent and anonymized data).

4. Legal & Ethical Compliance

CardioBond complies with:

• Digital Personal Data Protection Act, 2023 (India)
• ICMR Guidelines for Biomedical and Health Research

We ensure:

• Informed consent before data collection
• Ethical handling of patient data
• Use of data strictly for defined healthcare and research purposes

5. Data Anonymization & Research Use

• Personal identifiers are removed or coded before analysis
• Research findings are reported in aggregate form
• No individual patient can be identified from published results

6. Data Sharing

We do not sell or rent your data.

We may share data only with:

• Authorized healthcare professionals involved in your care
• Research teams (only anonymized data)
• Regulatory authorities (if legally required)

All access is strictly controlled and monitored.

7. Data Security

We implement strong security measures including:

• Secure cloud storage
• Encryption of sensitive data
• Role-based access control
• Restricted access to authorized personnel only

8. Data Retention

• Data is retained only as long as necessary for treatment, research, and legal compliance
• Users may request deletion of their data, subject to regulatory requirements.

9. User Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Withdraw consent at any time
• Request deletion of your data
• Know how your data is being used

10. Consent

By using CardioBond, you:

• Provide informed consent for data collection and usage
• Agree to participate in digital rehabilitation tracking (if enrolled)
• May withdraw consent at any time without affecting your care

11. Third-Party Services

If third-party tools are used (e.g., analytics, cloud providers), they will comply with applicable data protection laws and maintain strict confidentiality.

12. Updates to This Policy

This policy may be updated periodically. Users will be notified of significant changes.

13. Contact Information

For questions or concerns about this Privacy Policy, contact:
Email: info@vidyanta.com
Organization: CardioBond Research Team

Data Protection & Confidentiality Policy (Internal Use)

Key Principles

1. Confidentiality

   • Patient data is strictly confidential
   • Access limited to authorized personnel only

2. Data Minimization

   • Only necessary data is collected

3. Secure Handling

   • Data stored in encrypted and secure systems

4. Controlled Access

   • Role-based permissions for clinicians and researchers

5. Audit & Monitoring

   • Regular checks on data access and usage

6. Ethics Compliance

   • Institutional Ethics Committee (IEC) approvals required
   • Strict adherence to research protocols