Privacy Policy

Last updated: September 2025

1. Information We Collect

We collect anonymous clinical data including vital signs, lab results, and treatment parameters solely for AI model training.

All patient identifiable information is encrypted and stored in compliance with HIPAA, GDPR, and ISO 27001 standards.

2. Data Usage

Data is used exclusively to:

3. Data Security

Military-Grade Encryption

  • • AES-256 at rest
  • • TLS 1.3 in transit
  • • Quantum-resistant key exchange

Access Controls

  • • Zero-trust architecture
  • • 2FA for all user access
  • • Role-based data restrictions

4. Data Retention

Production Data

Clinical datasets are retained for 7 years from last user access per FDA 21 CFR Part 11 requirements.

Training Data

Anonymized datasets used for model training are retained for 5 years post-model deployment unless local regulations require otherwise.

5. User Rights

Access & Deletion

You may request access to your data or deletion at support@ai-icu.com

Data Portability

In compliance with GDPR Article 20, all user data can be exported in FHIR-compliant formats upon request.

Contact Us

For privacy-related inquiries, please email our Data Protection Officer at:

dpo@ai-icu.com