Privacy Policy
How Slashcure collects, uses, and protects your information. Aligned with Pakistan's data-protection expectations (PDPB / PECA).
This is a starting template — have it reviewed by legal counsel before launch.
1. Who we are
Slashcure is a lifetime patient health-record service. You (the patient) own your record and control who can access it.
2. Information we collect
- Account data — email, role, and (for doctors) professional details.
- Health data (sensitive personal data) — biodata, conditions, medications, allergies, disease-specific records, uploaded reports/images, and readings you provide.
- Access records — an immutable log of who viewed your record, when, and why.
3. How we use it
Solely to provide the service: to store your record, let you share it with clinicians you authorise, and generate your summaries, timeline and reports. We do not sell your data or use it for advertising.
4. Consent & legal basis
We process your health data on the basis of the explicit consent you give at sign-up. You may withdraw consent and request deletion at any time.
5. Sharing & access
Your full record is shared with a clinician only when you approve a request (confirmed with a one-time code), and access is time-limited and revocable. Emergency QR scans reveal only a limited set of life-saving details. Every access is logged and visible to you.
6. How we protect your data
- Encrypted in transit (HTTPS) and at rest.
- Database and file storage are locked to server-only access — the application is the single trusted gateway.
- Strict access controls, rate limiting, CSRF protection, and PII-redacted logging.
7. Data location
Data is stored in the asia-south1 (Mumbai) region, the closest available to Pakistan.
8. Your rights
You can access, correct, export (PDF), and delete your data. Use your profile to view and edit it, your Sharing & Access page to control and revoke access, and Health Insights to export a PDF copy.
9. Retention
Your record is retained for as long as your account is active, or until you request deletion, subject to any legal retention requirements.
10. Contact
For privacy requests or questions, contact info@slashcure.com.