Privacy Policy
This is an English translation. The original is in Brazilian Portuguese and prevails in case of any difference.
This Policy explains how Korys Health ("Korys", "we") processes personal data, in accordance with Brazil's General Data Protection Law (Law 13,709/2018 — LGPD).
1. ROLES
1.1. Your account data: Korys is the controller.
1.2. Patient data you record: you, the Professional, are the controller, and Korys acts as processor, handling this data only to provide the service, according to your instructions and this Policy.
2. DATA WE PROCESS
2.1. Account: name, CPF (Brazilian taxpayer ID), email, phone, address, profession, council registration number and state, specialties, availability, preferences and subscribed plan.
2.2. Patients: registration data (name, social name, date of birth, sex, CPF, contacts and address) and health data (progress notes, vital signs, allergies, conditions, medications, diagnoses, prescriptions, exams, procedures, vaccines and documents). Health data is sensitive personal data (art. 5, II, LGPD). Data of children and adolescents is processed in their best interest (art. 14, LGPD), for the provision of care.
2.3. Financial: amounts, charges and payments for appointments.
2.4. Security and audit logs: date, time and author of changes and of access to patient records (who opened each area), without copying clinical content.
2.5. Telehealth with Google Meet (optional): the email of the connected Google account and the identifier of the event created in your Google Calendar.
2.6. We do not use advertising or tracking tools in the app.
3. PURPOSES AND LEGAL BASES
3.1. Providing the contracted service (performance of contract — art. 7, V).
3.2. Health record-keeping and protection by the professional (art. 11, II, "f").
3.3. Compliance with legal or regulatory obligations, such as retention of health records (arts. 7, II, and 11, II, "a").
3.4. Security, fraud prevention and exercise of rights (arts. 7, VI and IX, and 11, II, "d" and "g").
3.5. We do not sell data, do not use it for advertising and do not train artificial intelligence models with patient data.
4. CLINICAL ASSISTANT
The assistant's suggestions are generated on your own device from the text you type; the text is not sent to third parties for this purpose.
5. DATA ON YOUR DEVICE (OFFLINE USE)
5.1. To work without internet, the app stores on the iPhone an encrypted copy of part of your data: the schedule and patients' names; for patients you have opened or who have appointments in the coming days, their record, history, vital signs and previous progress notes; the financial summary you viewed; and what you record offline (appointments, progress notes, vital signs, payments and record access) until it is sent. The key is kept in the device Keychain, and the copy is not included in iCloud backups.
5.2. Only the schedule and patients' names are synced by the offline provider (item 6.2(b)); the rest of the copy exists only on your device.
5.3. The copy is deleted when you sign out, when another account signs in on the device, when access is revoked and after 14 days without updates. Record access made offline is added to the audit log when the connection returns, with the time it occurred.
6. SHARING AND PROVIDERS
6.1. With professionals you authorize when sharing patients.
6.2. With essential providers (sub-processors), under contract and confidentiality obligations:
(a) Supabase — database, authentication and files, with servers in the São Paulo region (Brazil);
(b) PowerSync — sync for offline use, which receives only the minimal copy described in item 5.1;
(c) Resend — transactional emails (account confirmation and password reset);
(d) Apple — app distribution (App Store and TestFlight) and, if you allow it on your iPhone, crash reports without patient data;
(e) Cloudflare — hosting of the koryshealth.com website, without patient data.
6.3. Optional integrations, enabled by you:
(a) iPhone Calendar: appointments are copied to a calendar on the device itself, without clinical data; the patient's name only appears if you enable it;
(b) Google Meet: when you connect your Google account, each telehealth appointment creates an event in your Google Calendar titled "Teleconsulta — Korys Health" with the time, without the patient's name and without clinical data. Access to the Google account stays only on your device and can be revoked in My Account > Integrations;
(c) Maps and WhatsApp: routes and messages open in the apps you choose, which then process the data sent to them under their own policies.
6.4. With authorities, when required by law or court order.
7. GOOGLE DATA
Use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Korys uses access to Google Calendar only to create, update and delete the telehealth events you schedule; it does not read other events, does not store the content of your calendar, does not use this data for advertising and does not share it with third parties.
8. SECURITY
We use access control per professional and per patient (each professional sees only the patients they care for), encryption in transit and on the device, private document storage, a tamper-proof audit log and the principle of least privilege. The Korys team has no access to clinical content through the admin console. No system is completely immune to incidents; in the event of a relevant incident, we will notify those affected and the ANPD (Brazil's data protection authority), as required by law.
9. RETENTION
9.1. Account data: while the account exists and for the period needed to meet legal obligations.
9.2. Clinical records: for a minimum of 20 years (Law 13,787/2018), even after the account is closed.
9.3. Security, access and audit logs: for the same period as the record they refer to and, at a minimum, for the period required by Brazil's Internet Civil Framework (Marco Civil da Internet).
10. YOUR RIGHTS
You may request confirmation of processing, access, correction, anonymization, portability, information about sharing and review of automated decisions (art. 18, LGPD), through the contact in item 14. Patients should exercise their rights with the professional who cares for them, and we will support the professional in responding.
11. EXPORT, CLOSURE AND CUSTODY
11.1. You can export health records at any time (My Account > Export records).
11.2. Account closure has a 30-day period during which you can change your mind. After this period, account data not required for legal retention is deleted; we keep, accessible only by the server, the account's original email to confirm your identity in case of a recovery request.
11.3. Clinical records of patients with no professional with an active account remain in our custody, with restricted access, for the legal retention period (item 9.2), and are only made available to the patient, their legal representative, professional councils or authorities, as provided by law and after verification.
11.4. At the end of the legal retention period, patients' identifying data is anonymized.
12. INTERNATIONAL TRANSFER
The main database is in Brazil. Some providers and integrations (PowerSync, Resend, Apple, Cloudflare and, if you enable it, Google) may process data outside the country. In these cases, the transfer is limited to the minimum described in this Policy and takes place with the safeguards provided for in the LGPD (art. 33), such as data protection contractual clauses.
13. CHANGES
We may update this Policy. Relevant changes will be announced in the app and will require new acceptance. Previous versions are available on request.
14. CONTACT AND DATA PROTECTION OFFICER (DPO)
Data Protection Officer: Korys Health Privacy Team.
Help center: koryshealth.com/help (send feedback with the topic "Other" and mention "Privacy" in your message).