Privacy Policy

1.1 Personal Information

We collect personal information that you voluntarily provide when registering or using our platform, including:

• Full name, date of birth, gender, and contact information (email, phone, address)
• Government-issued identification (INE, CURP, passport) for identity verification
• Health insurance policy details and beneficiary information
• Payment and billing information for service transactions
• Account registration details across user roles (Patients, Doctors, Labs, Infusion Centers, HR, Agents, Managers, Accountants, Representatives)

1.2 Sensitive Health Data (Datos Personales Sensibles)

Under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), health data is legally classified as Sensitive Personal Data. With your express electronic consent, we collect and process:

• Laboratory test orders, clinical specimen data, and diagnostic reports
• Ambulatory infusion therapy orders, administration records, and dose verifications
• Physician consultation notes, diagnostic assessments, and medical histories
• Electronic prescriptions with active ingredients, dosage, and doctor credentials
• Cancer screening evaluations and risk assessment indicators

1.3 Technical, Device & Location Information

We automatically collect certain information when you access our platform:

• IP address, browser type, device model, and operating system
• Session data, page views, and navigation patterns
• Cookies and essential authentication session tokens
• Approximate geolocation coordinates when you explicitly initiate an outbound ride request (e.g. Uber deep links) to navigate to a confirmed medical appointment; location coordinates are used strictly on your device to pre-populate transportation destinations and are never tracked in the background, stored as persistent trip histories, or shared with advertisers

1.4 Professional Staff & Partner Information

For registered healthcare professionals, clinical partners, and operational staff (Doctors, Laboratory Personnel, Infusion Center Staff, HR, Agents, Managers, and Representatives), we additionally collect:

• Professional information, such as Cédula Profesional, specialty information, and issuing academic institutions
• Tax identification numbers (RFC, CURP) and billing addresses
• Bank account details for approved commission disbursements and service fee payouts
• Branch, laboratory, and clinical facility physical addresses and contact information

2.1 Operating the Platform

We use information to operate platform features and support interactions that users request. AyudaMedico provides software and coordination tools; it does not itself diagnose or treat:

• Supporting requests and communications involving independent laboratories, physicians, infusion centers, hospitals, and insurers
• Displaying or delivering information and records provided through the platform by users and service partners
• Providing prescription record and folio features; these features do not establish legal validity or pharmacy acceptance
• Managing appointments, scheduling, service reminders, and platform accounts
• Supporting insurance-related document and claim workflows with participating users and partners

2.2 Platform Operations & Role Boundaries

Access is managed through role-based permissions that may vary by platform feature:

• Access to clinical information is controlled by user roles and the permissions configured for platform features
• Administrative and operational functions are distinct from clinical functions; access depends on assigned role and permissions
• Sending essential medical alerts, test completion notices, and appointment reminders
• Communicating commission statements, invoice receipts, and billing records to verified partners

2.3 Financial & Legal Compliance

We process your information for:

• Billing, payment processing, and electronic invoice generation
• Auditable commission calculations for authorized sales agents and managers
• Fraud prevention, platform security monitoring, and access auditing
• Operating the platform, maintaining business records, and responding to applicable legal requirements
• Statistical and quality analysis using strictly de-identified and aggregated data

3.1 Use of AI-Powered Features

AyudaMedico uses artificial intelligence (AI) in certain software features. These features support platform workflows and do not provide medical diagnosis or treatment:

• AI-generated drafts or summaries based on information submitted for a platform workflow
• Automated pre-filling and extraction of insurance claim forms using uploaded documents
• AI-assisted test page content generation for laboratory test descriptions
• Intelligent chat assistance for platform navigation and general health information

3.2 Third-Party AI Services

Some AI features use third-party AI services. When you use a feature, information submitted for that task may be sent to the service provider for processing. The provider involved and its data handling depend on the feature and its configuration:

• Information submitted for AI-assisted summaries, document extraction, or chat may be transmitted to a third-party provider
• Review the applicable provider privacy information before using an AI feature
• AyudaMedico does not make a blanket representation here about provider retention, model training, or contractual terms

3.3 Patient Data & AI Processing

AI-generated material is software output, not medical advice or a substitute for review by an appropriately qualified professional:

• AI-generated material is software output, not medical advice, diagnosis, or treatment
• Users and professionals should independently review AI outputs before relying on them
• Contact us with questions about AI feature use or information associated with an account
• AI processing depends on the feature and the information submitted for it
• Some AI feature information may be used to evaluate or improve platform functionality

3.4 AI Audit Logs & Transparency

Some platform records may capture information about AI feature use for operation or security:

• The information recorded may vary by feature
• Record contents, access, and retention depend on the feature and applicable operational or legal requirements

3.5 Data Retention for AI-Processed Data

AI-related information may be handled by the platform and by the third-party service used for a feature:

• AI-generated outputs may be stored in platform records when a feature saves them and are subject to the practices described in Section 7
• Retention by an external service is governed by the applicable provider terms and configuration; this notice does not promise zero retention or a specific retention period
• Platform records and AI-generated content are handled under the retention practices described in this policy and applicable requirements

3.6 Your Consent to AI Processing

Before using an AI-assisted feature, consider that information submitted for the task may be processed by a third-party provider:

• Do not submit information that is not needed for the requested task
• AI-generated content does not replace professional medical judgment
• AI-generated outputs may be stored in platform records when a feature saves them

4.1 Security Safeguards

We use technical and organizational safeguards to help protect information. Safeguards vary by system and feature, and no online service can promise absolute security:

• Platform features use account and role-based permissions where applicable
• We review and update safeguards as platform systems change
• We do not represent that every transmission or stored item uses a particular encryption standard or that multi-factor authentication is available for every account

4.2 Access and Service Provider Practices

Access and data handling depend on the platform feature and the service provider involved:

• Some platform activity may be logged for operational and security purposes
• Information may be processed by infrastructure and technology providers needed to operate platform features
• This policy does not claim a particular audit-log coverage, retention period, encryption standard, or provider contract

5.1 Platform Interactions with Service Partners

When users request services through the platform, relevant information may be shared with the selected service partner to support that request:

• Physicians, laboratories, or infusion centers selected by the user
• Hospitals or other organizations receiving a user-requested inquiry
• Insurers or service partners involved in a user-requested workflow

5.2 Outbound Pharmacy Directory

The platform may link to third-party pharmacy search pages. Information included in a link or shared with a third-party website is subject to that site’s handling and privacy practices.

5.3 Hospital Communication Facilitation

For hospital room or operating theater inquiries initiated through the platform, information needed to route and respond to the inquiry may be processed by the platform and the participating organization.

5.4 Third-Party Transportation (Uber)

When a user follows a third-party transportation link, information in the link or provided to that service is subject to the transportation provider’s own practices.

5.5 Platform Partners & Operations

We share relevant operational and financial data with our registered platform partners:

• Agents receive operational commission statements and patient assignment records strictly within their scope
• Laboratory partners receive test orders, test tracking metrics, and billing records
• Managers receive operational workflow metrics and unassigned request queues without crossing provider boundaries

5.6 Legal & Regulatory Requirements

We may disclose information when required by applicable law or legal process:

• Court orders, judicial mandates, or legal processes
• Government or public authorities when legally required

5.7 Prohibition on Data Selling

AyudaMedico does NOT sell, rent, lease, or monetize your personal or health data to advertisers, data brokers, or commercial third parties under any circumstances.

6.1 Rights Under Mexican Privacy Law (LFPDPPP)

Under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), you have the right to:

• Access: Obtain a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete personal data
• Cancellation: Request deletion of your personal data when no longer necessary (subject to statutory medical retention mandates)
• Opposition: Object to the processing of your data for specific purposes
• Portability: Receive your data in a structured, machine-readable format

6.2 Platform Records

Depending on the information and applicable requirements, you may also contact us to:

• Ask about personal information associated with your account
• Request a correction or raise a concern about information displayed on the platform

6.3 Exercising Your Rights

To submit a privacy request, contact us using the information in the "Contact Us About Privacy" section below. We will review the request and respond as appropriate under applicable requirements.

7.1 Retention Periods

Retention depends on the type of information, platform function, operational needs, and applicable requirements:

• Some records may be retained by independent healthcare providers under their own responsibilities
• Platform information may be retained as needed to operate the service, meet applicable requirements, and address disputes or security matters
• Contact us to ask about information associated with your account or a specific platform feature

7.2 Secure Disposal

When information is no longer needed for the relevant platform purpose and may be deleted, it is handled under applicable platform procedures and requirements:

• Deletion or disposal may take time and may not immediately remove copies held by service providers, backups, or independent record holders

8.1 Types of Cookies We Use

We use the following types of cookies on our platform:

• Essential cookies: Required for core platform functionality (login sessions, security)
• Analytics cookies: Help us understand usage patterns and improve our services
• Functional cookies: Remember your preferences and settings
• Advertising cookies: Deliver relevant health-related advertisements via Google AdSense

8.2 Cookie Management

You can control cookies through:

• Your browser settings to block or delete cookies
• Our cookie preference center accessible from the website footer
• Third-party opt-out tools for advertising cookies (e.g., Google Ad Settings)

Our platform is not directed to children under 13 years of age. If you believe a minor’s information has been submitted to the platform, please contact us so we can review the request and applicable requirements.

Information may be processed in countries other than the country where it was collected, including by technology or AI service providers. The locations and handling practices depend on the service used. This notice does not represent that a particular transfer agreement or contractual safeguard is in place.

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will notify you of material changes through:

• Email notification to your registered address
• Prominent notice on our website and platform dashboard
• Updated "Last Updated" date at the top of this policy

Your continued use of our services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.