Privacy Policy

1. Information Hilva may process

Depending on the features you use, Hilva may process these categories:

• Account information such as name, email, role, language, and protected credentials.
• Assisted-person information such as preferred name, date of birth, time zone, and language.
• Medication and caregiving information such as medication name, strength, dose, schedules, instructions, dose status, and confirmations.
• Caregiving relationships and family groups, including permissions, roles, and coordination activity.
• Technical device and Web Push data needed to deliver notifications.
• Prescription images or PDFs when you choose assisted reading, together with the extracted draft and its review.
• Technical logs, audit data, security information, and usage metrics needed to operate and protect Hilva.

2. Why we use information

• Provide requested features such as schedules, reminders, confirmations, coordination, and administration.
• Authenticate users, enforce permissions, and protect accounts.
• Deliver notifications and operational messages.
• Temporarily process prescriptions when the user requests assisted reading.
• Diagnose failures, prevent abuse, maintain audit records, and improve stability and security.
• Comply with applicable legal obligations and respond to legitimate requests.

3. Health information and authorization

Hilva may contain sensitive information related to medications and caregiving routines. Anyone entering another person’s information must have sufficient authorization or another legitimate basis to do so.

Clinical permissions and family-group membership are managed separately to reduce unnecessary access.

4. Service providers

Hilva may use external providers for infrastructure, email, notifications, security, technical analytics, temporary storage, or artificial-intelligence features. Only information needed for the relevant function is shared, and we seek providers with appropriate security and confidentiality measures.

Hilva does not sell personal information or medication information to advertisers.

5. Assisted reading and artificial intelligence

If you choose to analyze a prescription, the file and information needed to extract a draft may be sent to the technology provider configured for that feature. The result returns to Hilva for human review before treatments are created.

Do not use this feature for documents you are not authorized to process. Hilva records technical usage of the feature for cost control and audit while avoiding unnecessary information in those records.

6. Retention

We retain information while needed to provide the service, preserve history requested by the user, protect security, resolve disputes, or meet legal obligations. Original prescription files are designed to be temporary and may be deleted after import or through automated cleanup processes.

Some audit or transaction records may be retained longer when needed for integrity, fraud prevention, accounting, or legal compliance.

7. Security

We apply reasonable technical and organizational controls to protect information, including authentication, permission separation, encrypted connections where appropriate, and audit records. No system can guarantee absolute security.

If you believe an account, private link, or device has been compromised, change credentials or revoke access and use the support channel published on hilva.app.

8. Cookies, sessions, and local storage

Hilva uses browser session and storage mechanisms needed for authentication, security, and preferences such as language, visual theme, PWA behavior, and notifications. These mechanisms are not used to sell advertising profiles.

9. Transfers and provider locations

Some technology providers may operate infrastructure in other countries. Where relevant, we seek reasonable safeguards based on the nature of the processing and applicable law.

10. Your choices and rights

You may request access, correction, or deletion of information where applicable, subject to account permissions and legal or technical retention obligations. You can also disable notifications on the device and manage available caregiver access in Hilva.

Specific rights depend on applicable law. To exercise them, use the support or contact channel published on hilva.app and provide enough information to identify the relevant account.

11. Minors or dependent people

Caregivers may use Hilva to organize information about people who require assistance. The person creating or managing that information is responsible for having the appropriate authority, consent, or other legal basis.

12. Changes to this policy

We may update this policy when features, obligations, or privacy practices change. The current version will be published on hilva.app with its update date.

13. Contact

For privacy questions, use the support or contact channel published on hilva.app. Avoid including health information that is not necessary to resolve your request.