Privacy Policy
Last updated: February 2025
SEVIA (“we,” “our,” or “us”) is committed to protecting the privacy and security of your health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered cervical cancer screening platform.
HIPAA Compliant
We adhere to strict HIPAA standards for protecting sensitive patient health information.
Transparent
Clear information about what data we collect and how we use it to improve healthcare outcomes.
1. Information We Collect
1.1 Patient Health Information
As a healthcare platform, we collect and process Protected Health Information (PHI) necessary for cervical cancer screening:
- Cervical images captured during VIA (Visual Inspection with Acetic Acid) examinations
- Patient demographics (age, location)
- Screening results and AI assessments
- HPV test results where applicable
- Clinical notes and healthcare provider assessments
1.2 User Account Information
For healthcare providers and administrators using our platform:
- Name, email address, and professional credentials
- Healthcare facility affiliation
- Role and permissions within the platform
- Login and authentication data
1.3 Usage and Technical Data
We collect information about how you interact with our platform:
- Device information (type, operating system)
- IP address and browser type
- Feature usage and interaction patterns
- Error logs and performance data
2. How We Use Your Information
We use the collected information for the following purposes:
- Provide screening services: Process and analyze cervical images using our AI technology
- Support clinical decisions: Assist healthcare providers with VIA classification and quality assessment
- Manage patient care: Track screening history and coordinate follow-up care
- Improve our AI: Enhance our algorithms while maintaining data anonymization
- Platform maintenance: Ensure security, troubleshoot issues, and optimize performance
- Compliance: Meet legal and regulatory requirements for healthcare data
3. Data Security and Protection
We implement comprehensive security measures to protect your data:
Security Measures
- •End-to-end encryption for data in transit and at rest
- •Role-based access controls with multi-factor authentication
- •Regular security audits and vulnerability assessments
- •Secure, HIPAA-compliant cloud infrastructure
- •Audit logs for all data access and modifications
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data only in the following circumstances:
- With your consent: When you explicitly authorize sharing with specific healthcare providers
- Healthcare providers: Within your organization to coordinate patient care
- Service providers: Trusted third parties who assist in platform operations under strict confidentiality agreements
- Legal requirements: When required by law, court order, or to protect rights and safety
- Research: Anonymized, aggregated data for public health research and AI improvement
5. Your Rights and Choices
Depending on your location and role, you may have the following rights:
- Access and review your personal information
- Request corrections to inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Export your data in a portable format
- Opt-out of non-essential communications
- Withdraw consent for specific data processing activities
To exercise these rights, please contact us at [email protected].
6. Data Retention
We retain health information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Patient screening data is typically retained for the duration specified by applicable healthcare regulations in your jurisdiction.
7. International Data Transfers
SEVIA operates in multiple countries, primarily across Sub-Saharan Africa. We ensure that any international data transfers comply with applicable data protection laws and maintain the same level of protection as required by HIPAA and local regulations.
8. Children's Privacy
Our platform is intended for use by healthcare professionals. We do not knowingly collect personal information directly from individuals under 18. Patient data is collected and managed by authorized healthcare providers in accordance with local regulations.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Address: Dar es Salaam, Tanzania