Privacy Policy
⚕️ Fractify AIScan is a clinical decision-support tool. All medical imaging data is processed under strict confidentiality obligations applicable to healthcare software.
1. Who We Are
Fractify AIScan ("Fractify", "we", "us") is an AI-powered medical imaging analysis platform operated at fractify.net. The platform is provided to licensed healthcare institutions and their authorized clinical staff.
2. Information We Collect
When you use Fractify AIScan, we collect the following categories of information:
- Account credentials — username and hashed password (never stored in plain text).
- Patient record identifiers — file numbers, patient name, age, gender, and clinical context entered by authorized clinical staff.
- Medical imaging files — X-ray, CT, MRI, and dental radiograph images uploaded for AI analysis.
- Session data — IP address, device/browser information, and login timestamps for security auditing.
- Usage logs — actions performed within the platform (analysis requests, report views, exports) for audit trail purposes.
3. How We Use Your Information
- To perform AI-assisted analysis of uploaded medical images and generate clinical reports.
- To maintain a patient visit history accessible to authorized clinical staff within the same institution.
- To detect and prevent unauthorized access, fraud, or misuse of the platform.
- To comply with applicable healthcare data regulations and legal obligations.
- To improve the accuracy and performance of our AI models using anonymized, aggregated data only (no identifiable patient data is used without explicit institutional consent).
4. Medical Data Handling
All medical images and patient data are transmitted over encrypted connections (TLS/HTTPS). Images are processed by our AI pipeline on secure servers and stored in encrypted form. Patient data is strictly scoped to the institution to which the treating clinician belongs — staff from one hospital cannot access records from another.
We do not sell, lease, or trade patient data to any third party. Medical images and patient identifiers are never used for advertising or profiling purposes.
5. AI Analysis Disclaimer
AI-generated results from Fractify AIScan are intended to support clinical decision-making only. They do not constitute a final medical diagnosis and must be reviewed and confirmed by a qualified healthcare professional. Fractify is not liable for clinical decisions made solely on the basis of AI output.
6. Data Sharing
We do not share personally identifiable information with third parties except in the following limited circumstances:
- AI processing — anonymized imaging data may be processed via the OpenAI API (GPT-4o) under OpenAI's data processing agreement, which prohibits training on API-submitted data.
- Legal obligations — we may disclose data if required by law, court order, or government authority.
- Security incidents — if a breach is detected, affected institutions will be notified promptly.
7. Data Retention
Patient records and analysis results are retained for as long as the institution's account is active, plus a minimum of 7 years to comply with standard medical record retention requirements. Users may request deletion of specific records through their system administrator.
8. Your Rights
Authorized institutional administrators can:
- Access and export all patient records associated with their institution.
- Request deletion of specific patient records.
- Revoke access for individual staff accounts.
Patients whose data has been entered into the system should contact their healthcare provider directly for access or deletion requests.
9. Security
We implement industry-standard security measures including: TLS encryption in transit, bcrypt password hashing, JWT-based mobile authentication, rate-limiting on login endpoints, session inactivity timeouts, CSRF protection, and detailed audit logs of all privileged actions.
10. Cookies and Local Storage
We use HTTP session cookies (no third-party tracking cookies) to maintain login state. The mobile app uses device secure storage (Expo SecureStore) for JWT token storage. We do not use advertising cookies or cross-site tracking.
11. Children's Privacy
Fractify AIScan is a professional clinical tool intended for use by licensed healthcare providers. It is not directed at individuals under 18. Patient records for minors may be entered by authorized clinical staff in the course of legitimate clinical care.
12. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be communicated to institutional account administrators. Continued use of the platform after the effective date of a revised policy constitutes acceptance.
13. Contact
For privacy-related questions, data access requests, or security concerns, contact us at: privacy@fractify.net