Privacy Policy
This policy explains how we collect, use, store, and protect personal data when you use the TricoSoft app, website, and related services.
1. Scope
This Privacy Policy applies to the TricoSoft mobile app on iOS and Android, the official website, and all related official services.
By using our services, you acknowledge that you have read this policy and agree to the processing of personal data as described.
2. Data we may collect
We collect only data that is necessary to operate the service, protect accounts, and improve user experience.
- Registration and authentication data: name, professional email, encrypted password, and session information.
- Clinic and patient data entered by professionals: identifiers, assessment history, images, and anamnesis responses.
- Technical and usage data: device model, operating system, app identifiers, crash logs, and performance metrics.
- Support data: messages and attachments voluntarily submitted through support channels.
3. Purposes of processing
We use personal data to provide core features and comply with contractual and legal obligations.
- Create and maintain authorized user accounts.
- Run trichoscopy analyses and generate AI-assisted outputs.
- Enable clinical follow-up and progress comparison over time.
- Generate, share, and store reports requested by users.
- Send operational messages, security alerts, and service updates.
- Detect fraud, abuse, and security incidents.
- Comply with legal obligations and valid authority requests.
4. Artificial intelligence processing
To provide AI-assisted trichoscopy analysis features, AI processing runs locally on the user's mobile device, without sending images to third-party servers for that purpose.
This processing is performed only to run the analysis requested by the user, generate automated results, support patient progress tracking, historical comparison, and report creation.
Images, results, and related records may be stored while needed for these purposes, according to the retention rules in this policy and the settings available in the service.
TricoSoft does not sell personal data, does not use exam images for advertising purposes, and does not share this data for behavioral advertising.
- Data that may be processed: trichoscopy images captured by the professional, information required to run the analysis, and results generated by the automated analysis.
- Purpose of processing: provide technical and informational support to the professional, without replacing human clinical judgment.
- Security: when synchronization or storage occurs on TricoSoft servers, we use technical protection measures, including encryption in transit and access controls.
5. Legal bases
We process personal data under applicable legal bases, including contract performance, consent where required, compliance with legal obligations, and legitimate interest for security and service improvement.
Where sensitive health data is processed under a professional's instruction, that professional remains responsible for lawful use in their clinical practice.
6. Data sharing
We do not sell personal data. Data is shared only when necessary to operate the service.
- Cloud, authentication, storage, and monitoring providers.
- Technical partners supporting image processing and AI features.
- Integrations explicitly requested by the user, when available.
- Public authorities where legally required, by court order, or to protect rights.
7. International transfers
Data may be processed in servers located outside the user's country. In such cases, we apply appropriate contractual and technical safeguards.
8. Retention and deletion
We retain data for as long as required to fulfill the purposes described in this policy, comply with legal duties, prevent fraud, and maintain service continuity.
When data is no longer needed, we securely delete, anonymize, or block it as appropriate.
9. Information security
We implement administrative, technical, and organizational safeguards to protect data against unauthorized access, loss, misuse, alteration, or disclosure.
- Encryption in transit and role-based access controls.
- Security event monitoring and audit logging.
- Periodic security reviews and secure development practices.
10. Data subject rights
Depending on applicable law, you may request access, correction, update, portability, anonymization, restriction, deletion, or review of automated processing.
Requests can be sent to the contact listed in this policy. We may request identity verification before processing sensitive requests.
11. Children's privacy
TricoSoft services are intended for professionals and organizations. We do not knowingly collect children's data without an appropriate legal basis and controller responsibility.
12. Third-party links and services
Our app and website may contain links to third-party services. We are not responsible for those third parties' privacy practices.
13. Policy updates
We may update this policy from time to time. The current version will always be available on this page with the effective date.
For material updates, we will take reasonable steps to notify active users.