1. Introduction
NxtCure ("we," "us," or "our") is committed to protecting your privacy and the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the NxtCure mobile and web application (the "App") to find and connect with clinical trials using our artificial intelligence matching algorithm.
Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the App.
2. Information We Collect
2.1 Personal Information You Provide
We collect information that you voluntarily provide when using the App, including:
Account Information:
- Name
- Email address
- Phone number
- Date of birth
- Gender
- Country/region of residence
- Preferred language
- Username and password
Health and Medical Information:
- Medical conditions and diagnoses
- Current and past medications
- Treatment history
- Laboratory test results
- Symptoms and symptom history
- Allergies
- Medical procedures and surgeries
- Healthcare provider information
- Medical images or documents you choose to upload
- Family medical history (if relevant to trial matching)
Demographic Information:
- Age
- Ethnicity and race
- Geographic location
- Education level
- Employment status
2.2 Information Collected Automatically
We collect device and usage information, including:
- Device type, model, and operating system
- IP address and browser type
- App usage patterns and analytics
3. How We Use Your Information
3.1 AI-Powered Clinical Trial Matching
Our artificial intelligence algorithm uses your information to:
- Match you with potentially suitable clinical trials based on eligibility criteria
- Rank trials by relevance to your medical profile
- Predict your likelihood of meeting specific trial requirements
- Suggest trials you might not have considered
- Continuously improve matching accuracy through machine learning
Algorithm Transparency:
- Our AI uses machine learning models trained on anonymized clinical trial data
- The algorithm is regularly audited for bias and fairness
- Final eligibility decisions are always made by clinical trial investigators, not by our AI
3.2 AI Services and Data Processing
NxtCure uses Google Gemini AI (by Google LLC) to power features such as the chatbot, voice assistant, symptom checker, and personalized health insights.
When you use these AI-powered features, certain user data may be securely transmitted to Google's servers for real-time processing. This data may include text inputs, voice recordings, reported symptoms, health-related information, and relevant contextual data provided within the app. This information is used solely to generate accurate and personalized responses within the app.
NxtCure also uses Firebase (by Google) for backend services, including secure data storage, authentication, and app functionality. All user data stored in Firebase is protected using industry-standard security measures.
We do not sell, rent, or misuse user data. Data is only used to provide and improve app functionality. Users have full control over their data and can choose not to use AI-powered features at any time.
All third-party services used by NxtCure, including Google Gemini and Firebase, are required to maintain appropriate data protection and security standards.
4. How We Share Your Information
We do not sell your personal health information to third parties.
4.1 With Your Explicit Consent
We share your information when you expressly authorize us to do so with clinical trial sponsors and sites when you express interest in a specific trial or request to be contacted by a trial coordinator.
4.2 Service Providers
We share information with third-party service providers who perform services on our behalf, including cloud hosting, customer support, and analytics. All service providers are bound by confidentiality agreements and must maintain appropriate security measures.
5. Data Security
5.1 Security Measures
We implement comprehensive security measures to protect your information:
Technical Safeguards:
- End-to-end encryption (TLS 1.3)
- AES-256 encryption at rest
- Multi-factor authentication
- Regular security audits
Administrative Safeguards:
- Role-based access controls
- Employee security training
- Incident response procedures
- Vendor management oversight
Note: No security system is completely secure. While we use industry-standard measures, we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as necessary to provide services and fulfill the purposes described in this policy:
- Active Accounts: Account information retained for duration of account plus 90 days
- Health Information: Duration of account plus 3 years for continuity of matching
- Inactive Accounts: Accounts inactive for 24 months may be archived
7. Your Rights and Choices
7.1 Access and Portability
You have the right to view all personal information we hold about you and receive a copy in a portable format.
7.2 Correction and Update
You can update your information anytime through Account Settings or request corrections to inaccurate data.
7.3 Deletion (Right to be Forgotten)
You can request deletion of your data via Settings > Privacy > Delete My Account. We will process deletion within 30 days.
7.4 Opt-Out and Consent Withdrawal
You can unsubscribe from marketing communications, adjust notification preferences, and revoke consent for research data sharing at any time.
8. Special Protections
8.1 Sensitive Health Information
We recognize that health information is highly sensitive. We process health data only with explicit consent and use it solely for trial matching purposes. We never use health data for discriminatory purposes or marketing.
8.2 Children's Privacy
The App is not intended for children under 18. We do not knowingly collect data from children under 18. If we discover we have collected such data, we delete it immediately.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: superadmin@nxtcure.com
- Address: NxtCure Privacy Team