Privacy Policy for OncoLOG

Effective Date: June 16, 2026

Welcome to OncoLOG ("we," "our," or "us"). We are committed to protecting the privacy and security of both our users (authorized medical professionals) and the patient data processed within our application. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our mobile application and our website located at oncolog.app.

1. Information We Collect

a. Professional User Data

To provide access to OncoLOG, we collect professional information from authorized physicians, including:

• Full name, professional email address, and phone number.
• Medical license number, specialty (e.g., Internal Medicine, Oncology), and institutional affiliation (hospital/clinic).
• Authentication credentials (passwords, biometric data tokens).

b. Patient Data (Processed on Behalf of the User)

As an oncology logging and tracking tool, OncoLOG processes patient health information entered by you. This may include clinical notes, lab results, treatment histories, and staging data. We act strictly as a Data Processor regarding patient health data, while you (or your institution) remain the Data Controller.

2. How We Use Your Information

We use the collected data to:

• Verify your identity and authorization as a licensed medical professional.
• Provide, maintain, and improve the features of the OncoLOG application.
• Ensure compliance with healthcare regulations regarding data access and logging.
• Send critical administrative updates, security alerts, and technical notices.

3. Data Security and HIPAA/GDPR Compliance

Patient data privacy is our highest priority. We implement industry-standard security measures, including:

• End-to-end encryption for data in transit and at rest.
• Strict access controls limiting data visibility only to authorized users.
• Comprehensive audit logs recording all data entries, modifications, and views by physicians.

4. Data Sharing and Disclosure

We do not sell, rent, or trade professional or patient data. We may only disclose information:

• To comply with legal obligations, court orders, or government regulations.
• To trusted third-party service providers (e.g., secure cloud hosting) who operate under strict data processing agreements.

5. Your Rights

As a registered physician, you have the right to access, correct, or request the deletion of your professional profile data. For inquiries regarding patient data, requests must be handled in accordance with your medical institution’s compliance policies.

6. Contact Us

If you have any questions about this Privacy Policy, please contact us at: legal@oncolog.app