Collect only what is needed
We ask for the account, symptom, and ECG details a cardiologist needs to review your recording, and nothing more.
Security and privacy
Designed to keep your heart data protected.
KALBI uses layered safeguards to protect your ECGs and personal information, from the moment you upload through cardiologist review and report delivery.
Protection by design
What happens to your data
Security controls work together across the whole life of an ECG submission.
Encrypt and protect
Your data is encrypted during transmission and while stored, on secure infrastructure with tightly controlled keys and secrets.
Limit every access
Only you and the reviewing cardiologist can open your records. Staff access is role-based, minimal, and logged.
Deliver securely
Your signed report is delivered inside the app. You decide when to download it or share it with your doctor.
Our commitments
What we do and do not do with your data
Plain commitments you can hold us to.
Designed around HIPAA
Our administrative, physical, and technical safeguards are designed around the HIPAA Privacy, Security, and Breach Notification Rules.
We never sell your data
Your ECG, symptoms, and health information are never sold, rented, or used to build advertising profiles.
You decide who sees your report
Your report is yours to download as a PDF and share with your own physician whenever you choose.
Vendors are held to our standard
Service providers that handle health information are assessed first and must sign agreements to protect it.
Access is limited and logged
Only you and the clinicians involved in your review can reach your records, and every record access is logged.
You can request deletion
You can ask us to delete your information, subject to the medical-record retention periods the law requires.
Behind the scenes
Security is an ongoing practice
- Access rights are reviewed regularly and removed when no longer needed.
- Systems and software dependencies are patched and monitored.
- Data is backed up, and retention and deletion follow documented policy.
- Security events are recorded, investigated, and used to improve our controls.
- If a breach ever affects your information, we will notify you as the law requires.
Your part
Keep your account safe
- Use a passcode, Face ID, or Touch ID on your iPhone.
- Keep iOS and the KALBI app up to date.
- Never share your login details. KALBI will never ask for your password by email or phone.
- Only share report PDFs with people you trust, such as your doctor.
- Tell us at once if you notice activity you do not recognize.
Found a security concern?
If you believe you have found a vulnerability or that your account has been accessed without permission, email us. Please do not share details publicly until we have had a chance to fix it.
Read how we use and share your information in our Privacy Policy.
KALBI is not for emergencies. If you have chest pain, fainting, severe shortness of breath, or any symptom that feels severe, call 911 or go to the nearest emergency department now. Do not wait for an online ECG review.