Lesion Scope — Privacy Policy
As CORPAL DIGITAL HEALTH TECHNOLOGIES INCORPORATED ("Company"), we pay maximum attention to the security and confidentiality of your personal data processed through the Lesion Scope mobile application ("Application"), in accordance with the Personal Data Protection Law No. 6698 ("KVKK"). This text has been prepared to inform you about the purposes for which your data is collected, stored, and shared, and about your rights.
1. Processed Personal Data
During your use of the Application, the following categories of data are processed due to the nature of the service we provide:
- Identity and Contact Information: First name, last name, and email address.
- Visual Records and Documents: Photos taken with the in-app camera or uploaded from the device gallery/files, and PDF medical documents. (This data is uploaded to our system for skin/lesion tracking purposes.)
- Patient Tracking Data: Patient notes entered manually within the Application, analysis comments, and follow-up history.
- Transaction Security and Technical Data: IP address, device information, in-app log records, and subscription status.
2. Purposes of Personal Data Processing
Your personal data is processed for the following purposes:
- Service Provision: Visual archiving of skin conditions of users or patients, tracking changes over time, and analysis.
- Cloud Storage Service: Secure backup of uploaded images and documents on cloud servers within your subscription package to prevent data loss.
- Clinical Collaboration: Under the "Clinic Subscription", authorized users from the same clinic can view, analyze, and manage patient tracking in a shared pool.
- Membership Management: Creating user accounts and maintaining subscription services.
3. Data Storage and Infrastructure
Your data is hosted on global cloud service providers with the highest security standards.
- Data Storage: Text-based data, images, and documents are stored in encrypted cloud servers and database infrastructures with international security certifications.
- Service Providers: The Company utilizes third-party vendors (Cloud Service Providers) that provide technical infrastructure services compliant with industry standards.
Data Sharing:
- Intra-Clinic Sharing: If you use the "Clinic Subscription", uploaded patient data and images are shared only with your consent and through our technical infrastructure with other authorized users in your clinic.
- Legal Requirements: Your data is not shared with third parties except in response to legal requests from authorized public institutions and organizations.
4. Data Security
All user data is protected by encryption both during transmission (using SSL/TLS encryption technologies) and while stored on our servers (at-rest encryption). Industry-standard firewalls and access management policies are implemented to prevent unauthorized access to your data.
5. Data Retention and Deletion Policy
User data is retained as long as the membership account is active and for the legal retention periods stipulated by relevant legislation.
- Account Deletion: Users can request account closure and deletion of personal data through the link below (the "Account Closure Form"). Upon your request, your data will be permanently deleted or anonymized from the system, subject to applicable legal periods. Account Closure and Data Deletion Form
- Subscription Cancellation: If services are discontinued, your data will be deleted after the period determined by company policies.
6. Your Rights Under KVKK
Pursuant to Article 11 of KVKK, you have the right to learn whether your personal data is being processed, to request information if it is, to learn the purpose of processing, and to request correction or deletion of your data. To exercise these rights, you may submit your requests to info@corpalhealth.com .