1IntroductionOur commitment to protecting your privacy
NorCemic Inc. ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SmartCemic platform and associated services. It will also cover the QESA device when it becomes available.
HIPAA-aligned practices: we apply administrative, physical and technical safeguards modeled on HIPAA to protect your health information.
By using SmartCemic, you consent to the data practices described in this policy. We encourage you to read this policy carefully and contact us if you have any questions.
3How We Use InformationTo provide, maintain, and improve our services
Service DeliveryProcess biomarker measurements and provide health insights
PersonalizationCalibrate readings based on your skin tone and personal profile
CommunicationSend important updates, alerts, and support responses
ImprovementAnalyze usage patterns to enhance our algorithms and features
SafetyDetect and prevent fraud, security threats, and technical issues
ComplianceMeet legal, regulatory, and healthcare requirements
4Health Data Protection & SecurityHow we safeguard your information
Encrypted at RestHealth data is encrypted at rest with AES-256
Encrypted in TransitAll connections use TLS 1.2 or 1.3
Access ControlsRole-based, least-privilege access to health data
Access LoggingEvery access is logged
Data IsolationLogically separated from other users
Daily BackupsAutomated daily backups, with incident response procedures in place
5Information SharingWhen and how we may share your data
- With Your Consent: When you explicitly authorize sharing with healthcare providers or third parties
- Service Providers: Trusted partners who assist in operating our services (under strict confidentiality agreements)
- Legal Compliance: When required by law, court order, or government regulation
- Safety: To protect the rights, safety, or property of our users or others
- Research: De-identified, aggregated data for medical research (with your consent)
We Never Sell Your Data. NorCemic Inc. does not sell, rent, or trade your personal or health information. Your biomarker readings and health information are used solely to provide you with our services.
6Your RightsControl over your personal information
AccessRequest a copy of the personal data we hold about you
CorrectionRequest correction of inaccurate or incomplete data
DeletionDelete your account and data, subject to legal requirements
ExportRequest an export of your data
To exercise any of these rights, use the Email Us button at the bottom of this page. We respond to requests as required by applicable law.