Privacy policy

Who we are

Ubipulse is software for medical practices.

Each practice that uses Ubipulse is the controller of its patients' data. Ubipulse acts as a processor: it handles that data on behalf of the practice and following its instructions.

For any question about this policy, write to us at matias@ubipulse.ar.

What data we handle

Data of the practice's staff: name, email and login data.

Patient data loaded by the practice or provided by the patient: identification and contact details, clinical history, lab results and studies, prescriptions and orders, appointments, messages and, when the patient consents, the consultation audio and its transcription.

Health data is sensitive data under Argentina's Law 25,326 and is handled with that care.

Data from this website's contact form: name, specialty, email, phone and message.

What we use it for

We use the data only to provide the service to the practice: clinical record, scheduling, reminders, lab comparison, draft clinical notes and patient portal.

We do not sell data, we do not use it for advertising and we do not build profiles for third parties.

We use contact form data only to reply to you.

Artificial intelligence

Ubipulse uses artificial intelligence providers on plans that do not use the data to train their models.

AI prepares drafts and organizes the information. The decision always rests with the physician.

Providers

To provide the service we work with these providers, which act as processors: Vercel (hosting and functions), Neon on Amazon Web Services in the United States (database), Vercel Blob (file storage), Clerk (login), Resend (email), LiveKit (video calls), Google Gemini and Groq (artificial intelligence models) and Cloudflare (DNS and email routing).

As a result, data may be stored and processed outside Argentina, which constitutes an international transfer. We work with providers that apply security measures and take on contractual commitments regarding the handling of the data.

Google user data

When a practice connects its Google Calendar, Ubipulse accesses calendar events only to sync the practice's schedule: it reads busy times and creates, updates or deletes the appointments Ubipulse manages.

This information is not shared with third parties, except as needed to provide that feature. It is not used for advertising or to train artificial intelligence models. No human reads it, except with the user's consent, for security purposes or to comply with a legal obligation.

Ubipulse's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

You can revoke access at any time at https://myaccount.google.com/permissions or by disconnecting Google Calendar from the app.

Security and retention

Data is encrypted in transit, access is restricted by role and sensitive fields are stored encrypted.

We keep the data while the practice uses the service and for the period required by Argentina's Law 26,529 for clinical records. After that, it is deleted or returned to the practice.

Your rights

Under Law 25,326 you have the right to access, rectify, update and request deletion of your data. You can exercise it with your practice or by writing to us at matias@ubipulse.ar.

Access is free of charge if requested at intervals of no less than six months, unless you show a legitimate interest (article 14, subsection 3).

Argentina's Agency for Access to Public Information (AAIP) is the control authority for Law 25,326 and receives complaints about breaches of personal data protection rules.

Changes

If we change this policy, we publish the new version on this page with the updated date.