Privacy Policy

We collect the information needed to provide the Service, including:

• Account information — name, email, role, and credentials.
• Health profile — details such as gender, date of birth, blood type, allergies, and emergency contacts that you choose to provide.
• Medical records — documents you upload, and prescriptions, sick leaves, and lab results issued to or by you.
• Usage data — basic technical information needed to operate and secure the platform.

We use your information to:

• Provide, maintain, and secure your account and records.
• Enable issuance and QR verification of medical documents.
• Generate AI summaries and insights at your request.
• Communicate with you about your account and the Service.

We treat your medical records as confidential. Access is restricted based on your role, and records are stored using industry-standard safeguards. Patients control their own records; medical centers can only see documents they have issued or that a patient has shared with them.

If you choose to connect Looms to Apple Health (on iOS) or Health Connect (on Android), we read only the data types you explicitly approve — such as steps, heart rate, sleep, weight, or blood pressure — and use them solely to display your health information within Looms and to provide the health features you request.

• We never use Apple Health or Health Connect data for advertising, marketing, or similar purposes.
• We never sell this data or share it with third parties, including data brokers or information resellers.
• We do not use this data to determine eligibility for benefits, insurance, employment, or credit.
• You can revoke access at any time in your device settings (Apple Health or Health Connect), and you can request deletion of any imported data from Looms.

We do not sell your personal or health information. We share data only: with parties you explicitly authorize (for example, a medical center you receive care from), to comply with legal obligations, or with service providers who help us operate the platform under strict confidentiality obligations.

When a document is verified via its QR code, the verifier sees only the limited details necessary to confirm authenticity (such as the issuer, the patient name, and document status). Verification does not grant access to your broader records.

We retain your information for as long as your account is active or as needed to provide the Service and meet legal requirements. You may request deletion of your account and associated data at any time.

Depending on your jurisdiction, you may have the right to:

• Access the personal and health data we hold about you.
• Correct inaccurate information.
• Request deletion of your data.
• Export a copy of your records.

Looms is not intended for use by children without the involvement of a parent or legal guardian. We do not knowingly collect data from children without appropriate consent.

We may update this Privacy Policy from time to time. We will revise the "last updated" date above and, where appropriate, notify you of significant changes.

For privacy questions or to exercise your rights, contact us through our Contact page or at privacy@looms.app.