Privacy Policy | Hyperbaric.app

Hyperbaric.app (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website and services.

What Data We Collect

Account Information

When you create an account, we collect your name and email address. If you sign in with Google or Apple, we also receive the profile picture that provider shares, and your password stays with that provider. If you sign up with an email address and password, we never store the password itself — only a salted scrypt hash of it, which cannot be turned back into your password.

User-Generated Content

If you submit reviews or other content on our platform, we collect and store that content along with the associated metadata (date, clinic reference, rating). If you report a review or block another member, we store the report (the reason, any note you add, and your account if you were signed in) and the block. A report or block made while you are signed in is deleted along with your account; a report made while signed out is never linked to any account, so it cannot be deleted that way. To act on a report or block, we also send the report reason and up to the first 200 characters of any note, and a blocked member's display name, to our team's internal workspace on Slack, where that copy is kept.

Usage Analytics

We use Cloudflare Web Analytics, a privacy-focused analytics service, to collect anonymous usage data such as page views, referral sources, general geographic region, browser type and page load performance. Cloudflare Web Analytics does not use cookies, does not fingerprint visitors and does not collect any personally identifiable information.

Why We Collect Data

We collect and process personal data for the following purposes:

Account management: To create and maintain your user account and enable you to submit reviews.
Service improvement: To understand how our platform is used and improve the user experience.
Directory operation: To maintain and operate the clinic directory and associated features.
Communication: To respond to your inquiries and provide customer support.

Legal Basis for Processing

We process your data based on the following legal grounds:

Consent: For user-generated content such as reviews, which you voluntarily submit.
Legitimate interest: For operating and improving the directory service, and for anonymous analytics.
Contractual necessity: For providing account functionality when you register.

Third-Party Services

We use the following third-party services that may process your data:

Google OAuth: For account authentication. Subject to Google's Privacy Policy.
Apple Sign-In: For account authentication. Subject to Apple's Privacy Policy.
MapLibre / OpenFreeMap: For rendering maps on our platform. Map tiles are served without tracking or personal data collection.
Cloudflare: For content delivery, security and anonymous, cookie-free website analytics (Cloudflare Web Analytics). Subject to Cloudflare's Privacy Policy.
Slack: For internal alerts to our team about new reviews and review edits or deletions, reports, blocks, clinic submissions, claims and messages.

Cookies

We use minimal cookies strictly necessary for authentication session management. We do not use advertising cookies, tracking cookies, or any third-party cookies. Cloudflare Web Analytics is entirely cookie-free.

Messages to clinics

When you message a clinic through Hyperbaric.app, we store your message, the treatment and timeframe you selected, and the clinic's replies, so the conversation can be delivered and continued. Messages may contain health information; we transmit them only to the clinic you chose, and we ask for your explicit consent before sending.

We keep inquiries for 24 months, after which they are anonymised. You can ask us to delete your messages at any time by contacting [email protected].

Messages are not medical advice and are not monitored for emergencies. If your situation is urgent, contact your local emergency number.

Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law. Anonymous analytics data is retained indefinitely as it cannot be linked to any individual.

You can delete your account yourself in the Hyperbaric app or on the web — see how to delete your account for the steps and what is kept.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate personal data.
Right to erasure: Request deletion of your personal data.
Right to data portability: Request a machine-readable copy of your data.
Right to object: Object to the processing of your personal data.
Right to restriction: Request that we limit the processing of your data.

Your Rights Under CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Right to know: Request information about the categories and specific pieces of personal data we collect.
Right to delete: Request deletion of your personal data.
Right to opt-out: Opt out of the sale of your personal data.
Right to non-discrimination: We will not discriminate against you for exercising your rights.

No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties. We do not share personal data with third parties for their own marketing purposes.

Children's Privacy

Hyperbaric.app is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately and we will take steps to delete it.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will indicate the date of the latest revision at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].