Privacy Policy

1. What we collect

• Account information — name, email address, phone number, and password;
• Health information you choose to share — treatment needs, medical history, diagnostic scans, X-rays, and other records you upload to receive clinic quotes;
• Payment information — processed securely by Stripe. We never see or store your full card number;
• Technical data — device, browser, and usage information that helps us operate and improve the platform.

2. Why we collect it

To match you with suitable clinics, to transmit your records only to clinics you explicitly authorize, to process payments, to coordinate appointments and follow-up, and to operate and secure the platform.

3. Your health information is sensitive — we treat it that way

• Your medical records are shared only with partner clinics you select and authorize, for the sole purpose of preparing your quote and treatment plan;
• We never sell your health information to anyone, for any purpose;
• You may withdraw an authorization or ask us to delete your records at any time (see Section 7).

4. Who else sees your information

• Clinics you authorize — receive the records needed for your quote;
• Stripe — processes your card payments under its own privacy policy;
• Hosting and infrastructure providers — store and transmit platform data under contract;
• Legal compliance — we disclose information only when required by law or to protect against fraud.

5. International transfers

Our partner clinics are located in Asia (including Vietnam and China). When you authorize a clinic to receive your records, your health information is transmitted to that country. By authorizing the transfer, you consent to it.

6. Data security

We use encryption in transit and at rest, access controls, and audit logging to protect your information. No system is perfectly secure, but we apply industry-standard safeguards appropriate to the sensitivity of health data.

7. Your rights

You may at any time request to access, correct, or delete your personal information by emailing zinkenwu@gmail.com. We will respond within 30 days. Payment records may be retained as required by financial regulations even after account deletion.

8. Data retention

We keep your information while your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes. Health records you ask us to delete are removed from our systems within 30 days, except where retention is required by law.

9. Adults only

Our services are intended for users 18 years of age or older. We do not knowingly collect information from children.

10. Changes to this policy

We may update this policy; material changes will be posted on this page with a new "last updated" date.

11. Contact

Questions about privacy: contact@auricreek.us · (832) 762-8708