Privacy Policy
Your privacy is our priority. This policy outlines how 20Bit collects, uses, and protects your data across our software and clinic management systems.
1. Introduction
Welcome to 20Bit. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how 20Bit ("we," "us," or "our") collects, uses, shares, and protects information when you use our website (https://20bit.store), the 20Bit Clinic Management System, our Hospital Management Systems, Mobile Applications, and related SaaS solutions (collectively, the "Services").
By accessing or using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use our Services.
2. Information We Collect
We collect information to provide better services to all our users. The types of personal information we obtain include:
- Account Information: When you register for our services, we collect your name, email address, phone number, and password.
- Medical Information (HIPAA & Local Compliance): For users of our Clinic and Hospital Management Systems, we may process patient health records, appointment histories, diagnoses, and prescriptions on behalf of healthcare providers. We act as a data processor for this information.
- Uploaded Files: Documents, images, or medical reports you or your healthcare provider upload to our secure cloud storage.
- Device Information: We collect specific information about your device, including hardware model, operating system version, unique device identifiers, and mobile network information.
- Log Data & Analytics: Details of how you use our service, such as search queries, IP addresses, system activity, hardware settings, browser type, and date/time of requests.
3. How We Use Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our healthcare and SaaS software solutions.
- To process transactions and send related information, including confirmations and invoices.
- To send administrative messages, technical notices, and security alerts.
- To respond to your comments, questions, and customer service requests.
- To monitor and analyze trends, usage, and activities to improve user experience.
- To detect, investigate, and prevent fraudulent transactions, security breaches, and other illegal activities.
4. Legal Basis for Processing
For users in the European Economic Area (EEA) and other applicable jurisdictions, our legal basis for collecting and using the personal information described above depends on the specific context in which we collect it. We normally process personal data only when:
- We have your explicit consent to do so.
- We need the personal data to perform a contract with you (e.g., providing SaaS services).
- The processing is in our legitimate business interests, provided it is not overridden by your data protection interests or fundamental rights and freedoms.
- We have a legal obligation to collect personal data from you.
6. Third-Party Services
To provide our complete suite of software solutions, we integrate with secure third-party services. These services have their own privacy policies governing data handling:
- Firebase AuthenticationUsed to securely authenticate users and manage sign-in.
- Cloud FirestoreUsed to securely store application and healthcare-related data.
- Firebase Cloud Messaging (FCM)Used to deliver appointment reminders, notifications, and important account updates.
- Firebase Analytics (if enabled)Used to understand application performance and improve the user experience through anonymous usage analytics.
- Google Play ServicesUsed to support core Android functionality and improve application reliability.
- Google MapsUsed for clinic location mapping and directions.
7. Data Sharing
We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates, and advertisers. We may share personal information with third-party service providers (as listed above) strictly for the purpose of operating our business and providing the Services. We may also disclose information if required by law, such as to comply with a subpoena or similar legal process.
8. Data Security
We implement enterprise-grade security measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. This includes SSL/TLS encryption for data in transit and AES-256 encryption for data at rest.
9. Data Retention
We retain personal information only for as long as necessary to provide our services, comply with applicable legal obligations, resolve disputes, enforce our agreements, and maintain the security and integrity of our platform. When data is no longer required, it is securely deleted or anonymized in accordance with our internal retention policies.
10. Your Rights
- Access your personal information.
- Request correction of inaccurate information.
- Request deletion of your personal information.
- Request a copy of your stored personal data.
- Withdraw consent for data processing where applicable.
- Contact us regarding any privacy concerns.
11. Account Deletion
Users may permanently delete their account by visiting our Delete Account page or by contacting 20bit.store@gmail.com.
Once the user's identity has been verified, we will permanently delete or anonymize personal information associated with the account, except where retention is required by applicable laws, regulatory requirements, fraud prevention, dispute resolution, or other legitimate legal obligations.
12. Children's Privacy
The application is not intended for children under the age of 13 without the consent of a parent or legal guardian. We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected without appropriate consent, we will take reasonable steps to delete it promptly.
13. International Data Transfers
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. By using our Services, you consent to this transfer. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
14. Contact Information
If you have any questions about this Privacy Policy, the practices of this site, or your dealings with our Services, please contact us at: