1. Who processes the data
MedHelps is a digital service for managing and monitoring people with myasthenia gravis. The service operator is the medical-service provider and data controller for the core clinical service.
2. Data we process
We may process name, date of birth, sex, email, telephone, account and subscription data; history, complaints, symptoms, diagnosis, MG-ADL, MG-QoL15R, QMG and MGFA; tests, investigations, treatment, circumstances, documents, files, change history and security logs.
Health data are sensitive personal data and are handled with enhanced safeguards.
3. Purposes
Data support account protection, the medical record, monthly monitoring, clinical follow-up, history retention, subscription and access management, support, security, audit and legal duties.
Personal data are not used for advertising or sold to advertisers.
4. Legal bases
Bases include performance of the agreement, legal duties and legitimate security interests. Health data may be processed when necessary for care by a professional bound by confidentiality. Separate explicit consent is requested only for a distinct purpose where law requires it.
5. Recipients and processors
Access is limited to the clinician and authorised professionals, necessary technical providers and legally required recipients. Cloud infrastructure includes Supabase, and each provider receives only the data needed for its role.
6. International transfers
Legally required safeguards are used where data are processed outside the user’s country or the European Economic Area.
7. Retention
Health data are retained as needed for follow-up, medical history, the agreement and law. Closing an account does not immediately erase documentation subject to legal or professional retention duties.
8. User rights
Depending on applicable law, users may request access, correction, a copy, restriction, portability, objection or erasure where applicable; withdraw consent-based permission; and complain to a competent authority.
9. Security
MedHelps uses role-based access, server-side rules, audit trails and technical and organisational safeguards. Patients see only their own information; clinicians and administrators act within their authorised scope.
10. Changes
A material update receives a new version date. If renewed acknowledgement is required, the user is prompted before continuing.