Privacy Policy

1. Introduction

This Privacy Policy explains how GraviLog ("we," "us," "our") collects, uses, discloses, and safeguards information when OB/GYN doctors ("you," "practitioner") use GraviLog EMR, and information related to patients entered into the system by practitioners.

2. Information We Collect

We collect the following categories of information:

• Practitioner account information: name, email, phone number, clinic details, login credentials.
• Patient record information entered by practitioners: contact details, obstetric and medical history, visit records, lab results, ultrasound results, and related clinical notes.
• Billing information: processed via our third-party payment provider (Paddle). We do not directly store full payment card details.
• Usage data: device and log information collected automatically to maintain security and improve the service.

3. How We Use Information

• To provide, maintain, and secure the GraviLog EMR platform
• To enable practitioner-patient connectivity via Momita, where a patient has opted in
• To process subscription payments
• To communicate service updates, security notices, and support responses
• To improve the platform based on aggregated, de-identified usage patterns

4. Data Security

Patient and practitioner data is encrypted in transit and at rest. Access to patient records is restricted to the authenticated practitioner account associated with that patient, and to authorized GraviLog personnel where required for support or legal compliance.

5. Data Sharing

We do not sell practitioner or patient data. Information may be shared with:

• Service providers who support hosting, payments (Paddle), or infrastructure, under confidentiality obligations
• Momita, where a patient has explicitly connected her account to a practitioner for remote monitoring
• Regulatory or legal authorities, where required by law

6. Practitioner Responsibilities

Practitioners are responsible for ensuring they have appropriate legal basis and, where applicable, patient consent to enter patient information into GraviLog EMR, in accordance with the practitioner's local healthcare data regulations.

7. Data Retention

Patient records are retained for as long as the associated practitioner account remains active, or as required by applicable medical record retention laws.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or request deletion of your account information. Use our contact form to make a request.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to active practitioner accounts.

10. Contact Us

For privacy-related questions, please use our contact form.