Privacy policy

• Legal entity and data controller: BOLDEANU MEDICAL S.R.L.
• Romanian tax identification number (CUI/CIF): 50030490
• Trade Register number: J2024000294096
• Registered office: Bulevardul Dorobanților nr. 470, Brăila, Brăila County, Romania
• Registration date: 30 April 2024
• Contact: contact@oncodots.com

• Account data: your email address and authentication data managed by our authentication provider; your plain-text password is not available to us.
• Profile data: information you enter voluntarily, such as symptoms, medication, and appointments.
• Technical data: device type, operating system, and accessibility preferences.
• Usage events: limited, privacy-safe interactions when product analytics is enabled.

• Providing application features, such as the journal, symptom tracking, and care circle.
• Sending notifications that you have explicitly enabled.
• Improving the experience using feedback and aggregated usage.
• Providing technical support when you request it.

Information about symptoms, medication, appointments, and health status is special-category data under GDPR, art. 9. We do not use it for advertising, sell it, or share it commercially.

• Care circle: people whom you explicitly invite and grant access to.
• Infrastructure and service providers: only to operate the application, under applicable contractual data-protection obligations.
• Meta Platforms: only if you separately allow Meta Pixel, for PageView on a few public institutional pages; the Pixel is blocked inside accounts, on medical pages, and on private links.
• Authorities: only when we have a legal obligation.

• Access: you may request a copy of your data.
• Rectification: you may ask us to correct inaccurate data.
• Erasure: you may request deletion of your account and associated data, subject to applicable legal obligations.
• Portability: you may request your data in a usable format where this right applies.
• Objection and withdrawal of consent: you may exercise these rights where the relevant legal basis permits.

We use encryption in transit through HTTPS/TLS and access controls. Operational access is limited to people and providers with a justified need. Passwords are processed by the authentication provider and are not stored by OncoDots in plain text.

Authentication sessions use secure cookies. Meta Pixel (ID 1053477680932970) loads after «Accept optional» or after campaign measurement is enabled separately. On public campaign pages it sends the PageView event and may receive the page address and campaign parameters, technical browser/device information, and the IP address; it may set cookies such as _fbp or _fbc. OncoDots separately retains the first-party source, campaign, public material and, only for approved public acquisition landings, the entry page; it links these to the account at registration to measure which material led to account creation. Medical, private, and token-bearing pages are not retained as attribution landings. Later account activity is not sent to Meta for this attribution. The preference can be changed in Settings → Privacy.

Contact us at contact@oncodots.com. We respond to personal-data requests within the period required by GDPR, normally no more than one month.