1. Introduction
So7tek is a platform for coordinating healthcare. Because that involves health information, we treat the data you entrust to us as sensitive by default and share it only where you have asked us to, or where the law requires it.
This policy explains what we collect, why, and the control you have over it. It applies to the So7tek web platform and mobile applications.
2. What we collect
- Account details — name, email address, phone number and date of birth.
- Health information — medical history, consultations, clinical notes, prescriptions and the documents you upload.
- Medication activity — the doses scheduled for you and whether each was recorded as taken.
- Vital sign readings — heart rate, blood pressure, temperature and blood-oxygen readings sent from connected sources.
- Insurance and billing records — policy details and records of fees and payments.
- Messages — conversations you exchange with your care team through the platform.
- Technical data — device and usage information needed to operate and secure the service.
3. How we use it
- To provide the service — appointments, prescriptions, records and messaging.
- To send reminders you have asked for, such as medication and appointment notifications.
- To show your care team the information you have shared with them.
- To answer questions you put to the in-app assistant, using only your own records.
- To keep the service secure, diagnose faults and meet legal obligations.
We do not sell your personal or health information, and we do not use it for advertising.
4. Your consent controls
Your documents are not visible to a clinician simply because they are on the platform. Access is something you grant, and it works at the level of the individual document.
- You choose which documents to share and which clinician to share each one with.
- You can set an expiry on a grant, or leave it open until you revoke it.
- You can revoke a single grant, or withdraw everything you have shared with one clinician, at any time.
- The platform will only let you share documents that belong to you.
Where the assistant retrieves information to answer a question, it draws only on the requesting patient’s own records, and each query is recorded in an audit trail.
6. Security
Access to the platform requires authentication, and permissions are enforced on the server for every request — including checks that a record actually belongs to the person requesting it. Each organisation’s data is isolated from every other organisation’s.
No system is perfectly secure. We work to protect your information with appropriate technical and organisational measures, but we cannot guarantee absolute security, and we will tell you if a breach affects you.
7. Retention
We keep health records for as long as your account is active, and afterwards only for as long as we are required to for legal, regulatory or clinical-record purposes.
TODO_LEGAL — concrete retention periods must be stated here, based on the governing jurisdiction’s medical-records requirements.
8. Your rights
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Request deletion of your data, subject to clinical-record retention obligations.
- Withdraw consent you have given, at any time, without affecting what was lawful before.
- Object to or restrict certain processing, and request a copy of your data.
9. Contact
Questions about this policy, or about the information we hold, can be sent through our contact page.
TODO_LEGAL — a monitored privacy contact address, the registered legal entity name and its registered address must be published here.
So7tek is a software platform that helps you coordinate care. It is not a medical provider and does not provide medical advice, diagnosis or treatment. In an emergency, contact your local emergency services.