About AiCenna: AiCenna is a digital health technology platform that uses artificial intelligence (AI) and digital twin technologies to support health monitoring, personalized wellness insights, and clinical decision support. Your privacy is a priority. This policy outlines how we collect, use, share, and protect your personal information in compliance with HIPAA (U.S.), CCPA (U.S.), and GDPR (EU).
Medical disclaimer: Unless expressly stated otherwise, AiCenna’s AI-generated outputs are designed to assist users and healthcare professionals and are not a substitute for independent medical judgment, diagnosis, or treatment decisions.
We may collect the following types of data when you use our services:
We process personal data under one or more of the following legal bases:
When you connect wearable or genomic data to the platform.
To deliver the services you have requested from us.
To improve, secure, and optimize the AiCenna platform.
To comply with applicable laws and regulatory requirements.
For users in the United States, we comply with the Health Insurance Portability and Accountability Act (HIPAA):
AI processing disclaimer: AI-generated summaries, recommendations, and digital twin insights are designed to support health monitoring and clinical decision-making. They should not be relied upon as the sole basis for diagnosis, treatment, or emergency medical decisions. Always consult a qualified healthcare professional for clinical guidance.
We do not sell your personal data. We may share your data only in the following circumstances:
You have the following rights regarding your personal data. Rights available to you may vary depending on your jurisdiction.
Request access to or correction of the data we hold about you.
Request deletion of your data, subject to legal and medical record-keeping requirements.
Request a copy of your data in a machine-readable format.
Opt out of non-essential data processing at any time.
EU residents: To exercise your rights under the GDPR, email us at info@aicenna.com. We aim to respond within 30 days.
We implement strong security measures to protect your information:
Security limitation: While we employ commercially reasonable administrative, technical, and organizational safeguards, no method of electronic transmission or storage can be guaranteed to be completely secure. We encourage you to protect your account credentials and report any suspected unauthorized access to us promptly.
Your data may be processed in the United States, United Arab Emirates (UAE), and Pakistan. We rely on Standard Contractual Clauses (SCCs) and other lawful safeguards to ensure adequate protection for data transferred outside the EU/EEA.
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately so we can delete it.
We may update this Privacy Policy periodically. When we do, we will revise the effective date at the top of this page. Continued use of our services after any changes indicates your acceptance of the updated policy. We encourage you to review this page regularly to stay informed.
For questions, concerns, or to exercise your privacy rights, please reach out to our privacy team.
