Privacy Policy
Last updated: May 1, 2025
1. Introduction
At Sanicle, we prioritize your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.
Sanicle is a comprehensive women's health platform designed for workplace wellness. We provide personalized health tracking for female employees while giving HR departments anonymized data insights for better workforce planning and employee support.
2. Information We Collect
We collect several types of information to provide and improve our services:
- Account Information: Name, email address, password (encrypted), and role within your organization.
- Organization Information: Organization name, subscription details, and administrator contact information.
- Health Data: Menstrual cycle information, symptoms, mood tracking, and other health-related data you voluntarily provide.
- Usage Data: Information about how you interact with our service, such as pages visited, features used, and time spent on the platform.
3. How We Use Your Information
We use your information for the following purposes:
- To provide and maintain our service.
- To personalize your experience and offer health insights.
- To communicate with you about your account or the service.
- To improve our platform based on user feedback and usage patterns.
- To provide anonymized and aggregated data to HR departments for workforce planning.
- To protect the security and integrity of our platform.
Important: Individual health data is never shared with employers or HR departments in a way that can identify you personally.
4. Data Protection Measures
Sanicle employs robust security measures to protect your data:
- Multi-Tenant Architecture: Complete data isolation between organizations.
- Data Anonymization: HR dashboard only shows anonymized, aggregated data.
- End-to-End Encryption: Secure communication for all health data.
- Role-Based Access: Strict permission system for different user types.
- GDPR Compliance: All data handling adheres to GDPR principles.
- Secure Authentication: Advanced auth system with JWT and next-auth.
- Audit Logging: Comprehensive activity tracking for security monitoring.
5. Data Sharing and Third Parties
We do not sell your personal information to third parties. We may share data in the following limited circumstances:
- Service Providers: We may share data with third-party vendors who help us provide and improve our services.
- Analytics Partners: We use analytics services to improve our platform.
- Legal Requirements: We may disclose data if required by law or in response to valid legal requests.
- Organization Administrators: If you're using Sanicle through your employer, organization administrators may have access to certain account information but not your health data.
All third parties we work with are bound by strict confidentiality obligations and data protection requirements.
6. AI and Health Assistant
Our AI health assistant, Sani, provides personalized support and guidance:
- Your conversations with Sani are protected with the same security measures as all other data.
- The AI uses your health data to provide personalized recommendations but does not permanently store conversation content beyond what's necessary to provide the service.
- We use aggregated, anonymized data to improve the AI assistant's performance, but this cannot be traced back to individual users.
7. Your Data Rights
You have the following rights regarding your personal data:
- Access: You can request copies of your personal data.
- Rectification: You can request that we correct any information you believe is inaccurate.
- Erasure: You can request that we erase your personal data in certain circumstances.
- Restriction: You can request that we restrict the processing of your data in certain circumstances.
- Data Portability: You can request that we transfer your data to another organization or directly to you.
- Objection: You can object to our processing of your personal data.
To exercise any of these rights, please contact us at the information provided below.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
When you delete your account, we will delete or anonymize your personal information, unless we need to retain certain information for legitimate business or legal purposes.
9. Children's Privacy
Our service is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe we have collected information from a child under 18, please contact us.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
privacy@sanicle.cloud