Privacy Policy
Bio-Conscious Technologies Inc. ("Bio-Conscious," "we," "us") builds Endobits, a clinical decision-support platform that analyzes continuous glucose monitoring (CGM) data. This policy explains what we collect, how we use it, and the choices you have.
1. Information we collect
- Account information you provide when you create an Endobits account, such as name and email.
- CGM data delivered from your sensor manufacturer (e.g., Dexcom, Abbott, Senseonics) after you authorize a connection between your manufacturer account and Endobits. This data flows under your authorization, your manufacturer's terms, and this policy.
- Clinical study data where Bio-Conscious supports a research study. Such data is de-identified at source and governed by a Data Use Agreement; we do not request or store directly identifiable records for these studies.
2. How we use information
We use information to provide and improve Endobits — including generating glucose forecasts, risk stratification and clinical decision-support outputs — and to validate and improve our models. We do not sell personal information.
3. Legal basis and consent
We process personal information based on your consent and to provide the services you request. Where Endobits is used in a clinical or research context, processing is additionally governed by the applicable study consent and agreements.
4. How information is shared
We share information only with service providers who help us operate the platform under confidentiality and security obligations, where required by law, or as authorized by you or an applicable agreement. We are not a Business Associate for CGM data delivered directly from a manufacturer under your authorization.
5. Storage and security
Data is held in HIPAA-compliant, encrypted cloud infrastructure (AWS), with encryption in transit and at rest, role-based access control, least-privilege provisioning, and access logging. Data for U.S. participants is stored in U.S. regions, consistent with our jurisdiction-of-residence practice. Access is restricted to authorized personnel bound by written confidentiality agreements.
6. De-identified data
We derive non-reversible, de-identified features (glycemic metadata) from CGM and related data. De-identified information is not personal information and may be retained indefinitely to maintain model accuracy and support validation.
7. Retention
Participant-linked study data is retained only for the period required by the applicable study, sponsor, IRB and records-retention law, then returned or securely destroyed. De-identified derived features are retained as described above.
8. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal information. To exercise these rights, contact our Chief Privacy Officer at privacy@bioconscious.tech.
9. International users
We store personal information consistent with your jurisdiction of residence. By using Endobits you understand that processing occurs as described in this policy.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
11. Contact
Chief Privacy Officer · privacy@bioconscious.tech
Bio-Conscious Technologies Inc. · 550 Robson St, Vancouver, BC, Canada V6B 2B7