Privacy Policy

Last updated: 1 September 2026

Data controller: AppMed Innovation SRL, Str. Ion Neculce, Nr. 11, Cam. 3, Sat Uricani, Com. Miroslava, Iași, 707316, Romania. Email: office@appmed.ro

This Privacy Policy describes how Derma-Cloud (“we”, “us”) collects, uses, stores and protects your personal data when you use our mobile application, website and related services.

1. Scope and global reach

Derma-Cloud is operated from Romania and is available to users globally. This policy applies to all users, wherever they are located. If you are in the European Economic Area (EEA), United Kingdom or Switzerland, we process your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable local data-protection law.

2. Data we collect

• Account data: email address, name, password hash, role (consumer/doctor/admin), terms acceptance.
• Health data (special category data): photos of skin lesions, AI analysis results (predicted conditions, confidence scores, ICD-10 codes, optional Fitzpatrick skin type), patient names/notes entered by doctors.
• Usage data: credits, analysis history, device type, operating system, app version, IP address, timestamps.
• Payment data: processed by third-party payment providers (e.g. Stripe, in-app purchase platforms). We do not store full payment card details.

3. Legal basis for processing

We process personal data on the following legal bases:

• Contract: to provide the app and your user account.
• Consent: for health data, optional features and analytics/tracking.
• Legitimate interests: fraud prevention, abuse prevention, service improvement and IT security.
• Legal obligation: compliance with medical-device, tax and consumer-protection laws.

You can withdraw consent at any time by contacting us or deleting your account.

4. How we use your data

• To authenticate you and manage your account.
• To process and store your images and return AI screening results.
• To manage credits and payments.
• To provide doctor-mode patient management features.
• To communicate with you about the service.
• To comply with legal and regulatory obligations.

5. Automated decision-making

The app uses an AI model (Autoderm) to analyse skin lesion photos and return a list of probable conditions. This is not a medical diagnosis. The output is presented to you for informational and triage purposes, together with a clear disclaimer and the option to consult a clinician.

6. Data sharing and third parties

We share data only with:

• Autoderm / First Derm AG: the AI-analysis provider. We send images to their API under a data-processing / business associate arrangement. Their processing is governed by their own terms and privacy policy.
• Cloud hosting / payment / analytics providers: under appropriate data-processing agreements.
• Legal authorities: where required by applicable law.

We do not sell your personal data.

7. International data transfers

Your data may be stored or processed in the EU and, through our service providers, in other countries. When data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions approved by the European Commission.

8. Data retention

• Health images and results are kept for as long as your account is active, unless you delete them earlier.
• Account data is retained for the period required by law (e.g. tax/accounting) after account deletion.
• Backups are retained for a limited period for disaster-recovery purposes.

9. Your rights

Depending on your location, you may have the right to:

• access, rectify or erase your personal data;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent;
• lodge a complaint with a supervisory authority (for EU users, the Romanian National Supervisory Authority for Personal Data Processing or your local authority).

To exercise your rights, contact us at office@appmed.ro.

10. Security

We use encryption in transit (TLS), access controls, hashed passwords and secure secret management. No system is 100% secure; you use the service at your own risk.

11. Children

The app is not intended for users under 18 without verifiable guardian consent. We do not knowingly collect data from children.

12. Changes

We may update this policy. The latest version will always be available in the app and on the website.