Legal
Privacy Policy
How KALBI collects, uses, shares, and protects your information when you use our app and website to have an ECG reviewed by a cardiologist.
Who we are
KALBI ("KALBI", "we", "us") provides store-and-forward ECG review. You upload an existing ECG image or PDF in the KALBI iPhone app, and a licensed, board-certified cardiologist reviews it and returns a signed report.
This policy applies to the KALBI app, the website at kalbi.us, and any communication you have with us. It does not apply to third-party services that created your original ECG document, which have their own privacy policies.
Information we collect
Information you give us
- Account details: your name, email address, date of birth, and sex at birth.
- ECG recordings: the PDF, image, or photo of each ECG you upload, and the device it came from.
- Symptoms and context: why you recorded the ECG, what your device reported, and any notes you add.
- Medical history: conditions, medications, and cardiac history you choose to add to your profile.
- Messages: anything you send to our support team.
Information created when you use KALBI
- Reports: the cardiologist's interpretation, recommendation, signature, and time of review.
- Service records: submission status, timestamps, and notification history.
- Technical data: app version, device model, operating system, and error logs used to keep the app working.
Payment information
Purchases in the app are processed by Apple through the App Store. We receive confirmation that a purchase was made, but we do not receive or store your card number.
How we use your information
- To deliver the service: route your ECG to a cardiologist, produce your report, and keep your history in one place.
- To contact you about your submission, including status updates and requests to resubmit an unreadable ECG.
- To keep the service safe and secure, detect misuse, and investigate problems.
- To improve the quality of reviews and the app, using de-identified or aggregated information wherever possible.
- To meet our legal, regulatory, and medical record-keeping obligations.
We do not use your health information for advertising, and we do not build advertising profiles.
Health information and HIPAA
ECGs, symptoms, and reports are health information. Where the Health Insurance Portability and Accountability Act (HIPAA) applies to our services, we handle that information as protected health information, and our safeguards are designed around the HIPAA Privacy, Security, and Breach Notification Rules.
If there is ever a breach involving your unsecured health information, we will notify you as the law requires. You can ask for a copy of our Notice of Privacy Practices by emailing support@kalbi.us.
How long we keep information
We keep your account and ECG history for as long as your account is open so you can see past reports.
Signed ECG reports are medical records. Federal and state law require us to keep them for a minimum period, often several years after the last review, even if you close your account. When that period ends, we delete or de-identify them.
Other information, such as technical logs, is kept only as long as needed for the purpose it was collected for.
How we protect your information
Your information is encrypted during transmission and while stored. Access is limited to the people who need it to provide your review, and access to records is logged. Read more on our Security page.
No system is perfectly secure. Please keep your phone locked and your account credentials private.
Your rights and choices
You can:
- See and download your ECGs and reports in the app at any time.
- Ask for a copy of the information we hold about you.
- Ask us to correct information that is wrong or incomplete.
- Ask us to delete your account and information, subject to the record-keeping rules above.
- Ask us to limit how we use or share your information.
- Turn notifications on or off in the app or your phone settings.
To make a request, email support@kalbi.us from the address on your account. We may need to confirm your identity first. We respond within the time the law requires and will not treat you differently for using these rights.
State privacy rights
Some states give residents additional rights over personal and consumer health data, including California, Washington, Nevada, Connecticut, Colorado, and Virginia. Depending on where you live, these may include the right to know what we collect, to delete it, to correct it, to withdraw consent, and to appeal a decision we make about your request.
We collect consumer health data only to provide the service you ask for, and we do not sell it. To use any of these rights, email support@kalbi.us. If we deny your request, you can appeal by replying to our decision.
Children
KALBI is for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has created an account, email support@kalbi.us and we will delete it.
Where your information is stored
KALBI is offered in the United States, and your information is stored and processed in the United States.
Changes to this policy
We may update this policy as the service or the law changes. We will change the date at the top of this page, and if a change is significant we will tell you in the app or by email before it takes effect.
Contact us
Questions about privacy or this policy: support@kalbi.us.