1. Introduction

Welcome to Orama ("we," "us," or "our"). We respect your privacy and are committed to protecting it through our compliance with this Privacy Policy. This policy explains how we collect, use, disclose, and safeguard your information when you use Orama, our associated mobile or web applications, and related services (collectively, the "Services").

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you disagree with any part of it, please discontinue use of the Services.

2. Information We Collect

Personal and Health Information

Patient Data: We may collect data such as patient name, date of birth, medical history, health records, prescription details, or other health information that you or authorized healthcare providers share with us.
User Account Information: If you create an account, we may collect details such as your name, email address, and any other information you choose to provide.

Integration with MeldRx

Our Services integrate with MeldRx, which may provide us with additional patient data, including but not limited to health records, appointment history, and diagnostic reports. This data is only accessed with your authorization or the authorization of an appropriate healthcare professional.

Usage Data

Device Information: We may automatically collect information about the device you use to access Orama, including IP address, operating system, and browser type.
App Interaction: We may collect details of your interactions with our Services, such as pages viewed, features used, and the time you spend on specific pages or features.

Cookies and Tracking Technologies

We may use cookies, web beacons, and similar technologies to track usage patterns, remember user preferences, and improve your overall experience. You may disable cookies in your browser settings, but note that certain features of the Services may become unavailable.

3. How We Use Your Information

Service Provision

We process patient health data to provide our core functionality: AI-driven analysis of medical and health-related data to generate insights and assist healthcare providers in decision-making.

AI Analysis

We use AI algorithms to analyze patient data. These insights are intended to support—but not replace—professional medical judgment.

User Account Management

We use your account information to administer your account, provide customer support, and communicate updates or service-related announcements.

Service Improvement

We analyze aggregated, de-identified usage data to improve our algorithms, troubleshoot issues, and develop new features.

Legal Compliance

We may use or disclose your information to comply with applicable laws, regulations, court orders, or lawful requests from governmental authorities.

4. Legal Basis for Processing

Where required by law (e.g., under GDPR), we rely on the following legal bases for processing:

Consent: You have given explicit consent for us to process your health data.
Contract: Processing is necessary to fulfill our contractual obligations to you (e.g., providing the Services).
Legitimate Interests: We process data for our legitimate interests, such as improving and securing our Services, without overriding your fundamental rights.
Legal Obligation: We may process data to meet legal requirements, including health data protection rules.

5. How We Share Your Information

With Third-Party Service Providers

We may share your information with trusted third-party vendors who help us operate our Services (e.g., cloud hosting providers, data analytics platforms). They will only have access to information needed to perform their specific tasks and are contractually obligated to maintain its confidentiality.

With MeldRx

Your data may be transferred to or from MeldRx to enable seamless integration and enhance healthcare analysis. MeldRx's use of your data is governed by their privacy policies, and we are not responsible for how they handle your information once shared.

Legal Obligations

We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.

6. Data Retention

We retain your personal and health data as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. We may also retain anonymized or aggregated data indefinitely for statistical analysis and product improvement.

7. Data Security

We employ administrative, technical, and physical safeguards designed to protect your data from unauthorized access, alteration, disclosure, or destruction. However, no security system is impenetrable; we cannot guarantee the absolute security of your data.

8. International Data Transfers

If you use Orama from outside our primary country of operation, your data may be transferred to and processed in countries that have different data protection laws. We will ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, such as the right to request access, correction, or deletion of your data. To exercise these rights, contact us at the information provided below. We will respond in accordance with applicable laws.

10. Children's Privacy

Orama is not directed to individuals under the age of 18. If you believe we have inadvertently collected personal information from a minor, please contact us so we can delete the information and terminate any related accounts.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page indicates when the policy was last revised. Your continued use of Orama after any changes implies your acceptance of the updated policy.

Orama Privacy Policy

Contents