Consumer Health Data Privacy Policy
Clear, public-facing policy information for how Sinoa operates, how your data is handled, and how to use the product responsibly.
Consumer Health Data We Collect
Consumer health data includes ECG recordings, recording metadata, Pattern Summaries, model observations, segment evidence, Pattern History, Trends, comparisons, notes that reveal health information, and shared health-data content. Account, device, and billing information can also be consumer health data when it identifies or can reasonably be linked to health information.
Sources
We receive consumer health data directly from you and from recordings or services you choose to use. SINOA creates derived consumer health data when it processes a submitted recording.
Why We Collect and Use It
With your separate consent, we collect and use consumer health data to process uploads; generate Pattern Summaries; provide history, Trends, comparisons, exports, and user-requested sharing; support and secure your account; troubleshoot the Service; and comply with law.
SINOA does not sell consumer health data and does not use it for targeted advertising.
Who Receives It
- Infrastructure, database, storage, backup, security, monitoring, and support processors operating SINOA under contract.
- A recipient or anyone possessing a health-data share link when you deliberately create or send it.
- Authorized personnel when you request support access or when access is needed for security and permitted by law.
- Authorities or other parties when legally required or necessary to protect rights and safety.
Consent and Withdrawal
Before SINOA accepts a new health-data upload, it asks for separate affirmative collection consent. This choice is not bundled with Terms, marketing, or optional analytics. Creating a public health-data link requires an additional just-in-time confirmation.
You may withdraw collection consent in Settings. Withdrawal stops new uploads and new processing that depends on consent. It does not automatically delete existing data or prevent export, deletion, billing, security, or support controls while the account remains open.
Your Rights and Deletion
Subject to applicable law, you may confirm collection or disclosure, access, obtain a portable copy, delete, withdraw consent, revoke shares, and appeal a denied request through SINOA settings or security@rhythmiqi.com. To appeal, reply with Consumer Health Data Appeal.
Verified deletion removes supported consumer health data from active systems and directs applicable processors to delete it. Encrypted backups expire through normal rotation, and deletion controls are reapplied after a disaster-recovery restore. Two-year pseudonymized legal and minimal billing evidence contains no consumer health data.
Contact
- RhythmIQ Insights LLC
- 1014 Douglas St., Forest Grove, OR 97116, United States
- security@rhythmiqi.com
- +1 503-862-9233