1. Introduction
HealthSync Private Limited ("HealthSync", "we", "us", or "our") operates ClaimSync, an enterprise healthcare claims management and operational software platform. This Privacy Policy explains how we collect, use, store, protect, retain, and disclose information when authorized users access ClaimSync through the web application or Android application (collectively, the "Service").
ClaimSync is intended for authorized healthcare organizations and authorized professional users. The current Android trial release is intended for authorized clinicians and is designed to provide claims-related information through a secure operational dashboard.
2. Scope
This Privacy Policy applies to the ClaimSync web application and ClaimSync Android application operated by HealthSync. It does not apply to unrelated HealthSync products or to third-party websites or services that may be accessed independently of ClaimSync.
3. Information We Collect
Based on the current ClaimSync Android application scope, the following categories of information may be processed.
3.1 Clinician Account Information
- Clinician name
- Clinician ID
- Office
- Department
- Username and authentication information required to access the Service
Clinician accounts are created and managed by an authorized HealthSync administrator. Users do not currently create accounts directly through the Android application.
3.2 Claim Information
- Claim amount
- Remittance amount
- Rejected or denied amount
- Rejection or denial code
- Claim status
The current Android application does not intentionally collect or display patient names, patient medical records, patient identifiers, diagnoses, procedures, insurance member details, contact details, or other patient-identifying information as part of the stated mobile-app functionality.
3.3 Technical Information
ClaimSync may process limited technical information that is necessary for authentication, secure communications, system operation, troubleshooting, and security, such as IP addresses, connection information, application version, and server security/audit logs, where technically generated by the infrastructure.
4. Information We Do Not Collect Through the Current Android Release
Based on the current release information provided to us, the ClaimSync Android application does not use push notifications and does not use Firebase, Firebase Analytics, Firebase Crashlytics, Google Analytics, Sentry, or other third-party analytics/crash-reporting SDKs.
The application does not require camera, microphone, contacts, location, SMS, or Bluetooth access for its current functionality.
5. How We Use Information
- Authenticate authorized clinicians and control access to ClaimSync.
- Provide authorized users with claim-related information and operational dashboards.
- Display claim amounts, remittance amounts, rejected/denied amounts, rejection/denial codes, and claim status.
- Maintain user roles, office and department associations, and access permissions.
- Protect the security and integrity of ClaimSync.
- Detect and investigate unauthorized access or misuse.
- Maintain audit and security records where required.
- Troubleshoot technical issues and maintain service availability.
- Perform backups, maintenance, and disaster-recovery activities.
- Comply with applicable contractual, legal, regulatory, and security obligations.
6. How Users Access ClaimSync
Users access the current Android application using a username and password. Accounts are provisioned by an authorized HealthSync administrator. Passwords are stored using secure password hashing and are not intentionally stored as plain-text passwords.
7. Data Sharing and Disclosure
HealthSync does not sell ClaimSync user information or claim information for advertising purposes. Based on the current application configuration, ClaimSync does not send the mobile application's claim data to external third-party systems.
Authorized customer or organizational personnel may access information according to their assigned permissions and the organization's use of ClaimSync.
HealthSync personnel may access information when reasonably necessary for administration, security, support, maintenance, troubleshooting, or other authorized operational purposes.
Information may be disclosed where required by applicable law, regulation, court order, or valid legal process.
Information may be disclosed where reasonably necessary to protect the rights, safety, security, or integrity of HealthSync, ClaimSync, users, or other persons.
8. Hosting and Storage
The ClaimSync production database is currently hosted on HealthSync's own production server. The ClaimSync backend connects to this production environment to process and deliver authorized application data.
HealthSync applies reasonable technical and organizational safeguards appropriate to the nature of the information and the operational requirements of the Service.
9. Data Security
ClaimSync uses HTTPS for communication between the Android application and the production backend. Authentication credentials are protected using secure password hashing. HealthSync also uses access controls and other reasonable security measures intended to prevent unauthorized access, alteration, disclosure, or destruction of information.
No internet-connected application or storage environment can be guaranteed to be completely secure. Users must keep their credentials confidential and report suspected unauthorized access to HealthSync.
10. Data Retention
HealthSync retains ClaimSync information for as long as reasonably necessary to provide the Service, maintain security and audit records, meet contractual requirements, and satisfy applicable legal, regulatory, accounting, or operational requirements. Specific retention periods may depend on customer requirements and applicable law.
Where information is contained in backups, deletion may occur through the normal backup lifecycle rather than immediately from every backup copy.
11. Account Deactivation and Deletion
ClaimSync currently does not provide a self-service account deletion feature within the Android application. Clinician accounts are managed by HealthSync administrators, who may deactivate or delete user accounts according to the organization's access-management procedures.
If an individual has a privacy or deletion request, they may contact HealthSync at development@healthsync.ae. HealthSync will assess the request in accordance with applicable law, contractual obligations, security requirements, and any legitimate retention obligations.
12. Healthcare and Clinical Functionality
ClaimSync is an operational software tool used in a healthcare environment. The current Android application provides authorized clinicians with claim-related dashboard information. It is not intended to provide medical diagnosis, treatment recommendations, emergency medical advice, or autonomous clinical decision-making.
The current Android release does not intentionally collect patient clinical records or patient-identifying information as part of the stated mobile functionality.
13. Android Permissions and Device Features
The current Android application does not require camera, microphone, contacts, location, SMS, Bluetooth, or push-notification access for its stated functionality. HealthSync will update this Privacy Policy and applicable Google Play disclosures if the application's permissions or functionality materially changes.
14. Cookies and Similar Technologies
The web application may use session cookies, local storage, or similar technical mechanisms where necessary for authentication, security, session management, and core application functionality. The Android application does not use advertising or analytics SDKs based on the information currently provided to HealthSync.
15. Third-Party Services and SDKs
The current ClaimSync Android application does not use Firebase, Firebase Cloud Messaging, Firebase Analytics, Firebase Crashlytics, Google Analytics, Sentry, or other third-party analytics/crash-reporting SDKs. The application also does not currently send data to external systems as part of its stated functionality.
If HealthSync introduces third-party services, SDKs, analytics, crash reporting, notification services, or external integrations that materially affect personal-data processing, the relevant Google Play disclosures and this Privacy Policy will be reviewed and updated as appropriate.
16. International Processing
ClaimSync is initially intended for operation in the United Arab Emirates (UAE). If information is processed or stored outside the UAE in the future, HealthSync will apply appropriate safeguards where required by applicable law.
17. Children's Privacy
ClaimSync is an enterprise application intended for authorized professional users and is not directed to children. HealthSync does not knowingly offer ClaimSync for use by children.
18. Changes to This Privacy Policy
HealthSync may update this Privacy Policy when ClaimSync's functionality, data practices, security measures, legal requirements, or business operations change. The updated policy will be published through the official HealthSync/ClaimSync website with a revised "Last Updated" date. Where required by applicable law, additional notice or consent will be provided.
19. Contact Us
For privacy questions, concerns, or data-related requests, contact:
HealthSync Private Limited
Email: development@healthsync.ae
Registered Address: H-5, Ramesh Park, Laxmi Nagar, Shakar Pur, East Delhi - 110092