Legal

Privacy Policy

Last updated: September 2026

CardioLens ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the CardioLens AI and ECG Builder applications and related services.

ECG Builder Collects Nothing

ECG Builder is a CardioLens product, and this policy covers it. Everything below about accounts, ECG images, and AI processing describes CardioLens AI, and none of it applies to ECG Builder.

ECG Builder has no account and no sign-in. It generates every tracing on your device, sends nothing anywhere, and has no analytics, no advertising identifiers, and no backend of any kind. The descriptions you type and the tracings you build never leave your device. Its only purchase, ECG Builder Pro, is handled entirely by the app store you bought it from, and we receive no personal information from it.

Information We Collect

When you create an account and use CardioLens AI, we collect:

  • Account information: email address, password (encrypted), and your selected role (medical student, nurse, paramedic, physician).
  • ECG images: photos you upload or capture for AI analysis. These are processed in real time and are not retained afterwards.
  • Usage data: scan counts, quiz progress, study module completion, and feature interaction patterns.
  • Subscription and purchase information: managed through Apple's App Store and Google Play on their respective platforms.
  • Crash and performance data: anonymous diagnostic data to help us improve app reliability.

How We Use AI

CardioLens AI uses Anthropic's Claude to analyse ECG images. When you submit an ECG for analysis:

  • Your ECG image is sent over an encrypted connection and passed to Anthropic's Claude API for interpretation.
  • Anthropic processes the image to generate a clinical interpretation and returns it to your device.
  • We do not retain your ECG images once an analysis completes.
  • Anthropic does not train its models on your data. Per Anthropic's commercial terms, API submissions are not used for model training.
  • Your identity is not shared with Anthropic. Scan credits are counted against an internal reference that means nothing outside your account.

You consent to AI processing the first time you submit an ECG for analysis. You can revoke this consent at any time by ceasing to use the AI Scanner feature. Your account and all other features remain functional.

Data Storage and Security

We rely on a small number of established service providers to operate CardioLens AI:

  • Anthropic: processes ECG images for AI analysis. Images are not retained.
  • Supabase: stores your account record, scan count, and subscription tier. Access controls restrict every record to the account that owns it.
  • Apple App Store and Google Play: process all in-app purchases. We never receive or store card details.
  • Cloudflare: serves this website and routes our support email.

Data in transit is encrypted using industry-standard TLS. Passwords are hashed and never stored in plaintext.

If you believe you have found a security issue in our apps or this website, please report it to support@cardiolens.ca rather than disclosing it publicly, and we will respond as quickly as we can.

Information We Do Not Collect

  • We do not collect patient-identifying information.
  • We do not access your photo library beyond images you explicitly select for ECG analysis.
  • We do not access your contacts, location, microphone, calendar, or other device data.
  • We do not use third-party analytics or advertising trackers.
  • We do not sell, rent, or share your personal information with third parties for marketing purposes.

Your Rights

You have the right to:

  • Access your personal data — contact us at support@cardiolens.ca to request a copy.
  • Delete your account and all associated data — email support@cardiolens.ca from the address associated with your account and we will delete your account and its records within 30 days.
  • Correct inaccurate information by editing your profile in the app.
  • Withdraw consent for AI processing by ceasing use of the AI Scanner.
  • Export your data — contact support@cardiolens.ca.

Educational Use Only

CardioLens is designed exclusively for educational purposes. It is not a clinical diagnostic tool and must not be used for patient-care decisions. AI-generated interpretations are educational references only and should not replace professional medical judgment.

Children's Privacy

CardioLens is intended for healthcare professionals and students aged 17 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@cardiolens.ca.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Significant changes will be communicated through an in-app notification.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

  • Email: support@cardiolens.ca
  • Website: www.cardiolens.ca

© CardioLens. For educational purposes only — not a diagnostic tool.