Privacy Policy

Diaverum d.CARE Patient App 

Privacy Policy

PLEASE READ CAREFULLY BEFORE YOU START USING THE Diaverum d.CARE PATIENT APP.
Failure to accept means that you will not be able to use the Diaverum d.CARE Patient App. 

Effective Date: May 8, 2025
Please note that hard copies of this document may be outdated and no longer valid. The latest version is available here:

https://www.diaverum.com/en/utilities/d_care_patient_app_privacy_policy_and_terms_of_use

Diaverum AB and its affiliates ("Diaverum") respect your privacy. This Privacy Policy applies to registered users of the Diaverum d.CARE Patient App (the "App"). It describes the types of personal data we collect and process in connection with the App, the purposes for which we collect that personal data, the other parties with whom we may share it, and the measures we take to protect the data. It also informs you about your rights and choices in relation to your personal data and how you can contact us to get answers to your questions about our privacy practices. If you do not agree to the Privacy Policy, you may not use the App. Except as set forth in Section 7, the entity responsible for collecting and using your personal data in the context of the App is:

Diaverum AB, company registration number: 559140-5344
Hyllie Boulevard 53, 215 37 Malmö, Sweden
E-mail address: info@diaverum.com

Diaverum has appointed a Data Protection Officer who can be contacted in writing using the information at the address indicated above or by email: se.dpo@diaverum.com

1. Personal Data We Collect

at. Personal data you provide
In connection with your use of the App, you may enter or share the following information:
•    A score of how you feel 
•    Fluid intake
•    Taking medication
•    Health Connect/Health Kit data, including Steps and Sleep. See also point (d.) next.

b. Personal data provided by other sources
Most of the information contained in the App is provided to you using the Diaverum clinic and patient management system as a source. This includes: 
•    information about the registered account (e.g., user ID, phone number, mode type), 
•    selected portions of prescribing information, including medications,
•    parts of dialysis treatment results, 
•    parts of the laboratory test information.

c. Information We Collect Automatically
We may collect certain anonymous information by automated means when you use the App ("Usage Information"), such as information about the aspects of the App that you use or visit, the date and time of day you access the App and the time spent using the App, your mobile internet browser, the model and operating system of your mobile phone, tablet, or other device (a "Device"), and other information described in this Privacy Policy.

The data collected automatically is processed to improve the App and to provide you with the best information and services. We may also collect your mobile device's IP address or other unique identifiers for any device on which the App is installed and used. A device identifier is automatically assigned to your device, and our systems identify your device by its device identifier.

d. d.CARE Health Connect Patient App/Health Kit
We also offer the ability to choose and share data from your native health app (Google's Health Connect or Apple's Health Kit) to the app. This could include sleep and step data, for example. The data is shared, after the user has given his/her informed consent through both the App and the native health app, stored in the App's database and made available to the user through the App. After the initial connection between the app and the native health app, 30 days of data is retrieved and shared with Diaverum, after which it is regularly updated with new data. The data is transferred and stored securely in the d.CARE app database. The health app data will be used solely for health management purposes and will not be shared by third parties and will not be used for advertising or similar services.
The aim is to promote dialogue between the nurse and the patient about the patient's well-being, using this data as a support, and to allow further involvement in their own well-being.

2. How we use Personal Data 

We may use the personal data we obtain about you in connection with the App to:

•    Provide you with information and statistics about your dialysis treatments and other health-related information with Diaverum.
•    Generate and distribute your login information securely.
•    Create and manage your account, provide our products and services, and respond to your requests;
•    Anonymize the data provided by the user during the use of the App in order to be able to use it for other purposes (anonymized content). 
•    Protect and prevent fraud; unauthorized activities; and claims and other liabilities; and managing risk exposure;
•    Operate, evaluate, and improve our business (including by developing new products and services, managing our communications, facilitating the functionality of our mobile application);
•    Enforce our Terms of Use;
•    Comply with applicable legal requirements and industry standards and our policies;
•    Respond to and process requests, complaints, disputes.
We may also use the information in other ways for which we provide specific notice at the time of collection.

In-app notifications: The user can receive system notifications such as reminders and information from the app. You can manage your notification preferences or turn off such notifications at any time by turning off the notification settings in the App or in the device settings of your mobile device. 

3. Personal data we share

We do not sell or otherwise disclose the personal data we collect and maintain about you, except as described in this Privacy Policy or otherwise disclosed to you at the time the data is collected.

Service providers: We may share personal data with our service providers who perform services on our behalf, such as companies that develop and support the operation of the App. We do not authorize these service providers to use or disclose data, except as necessary to perform certain services on our behalf or to comply with legal requirements. We contractually require these service providers to adequately safeguard the privacy and security of the personal data they process on our behalf and in accordance with this Privacy Policy.

Diaverum Clinic Staff: The information actively submitted to Diaverum via the app is made available to the clinic staff through a secure system that only authorized staff have access to. 
At your choice, you can also share personal information in the App with your clinic staff by physically presenting the content shown on the screen of your Device. 

Administrative and legal reasons: We may also disclose your data: (i) if required to do so by law or legal process, (ii) to law enforcement, authorities or other government officials, or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

4. Your Rights and Choices

You have the right to request access to all personal data about you that is processed by the Diaverum Group. In addition, you have the right to request the rectification of incorrect or incomplete personal data. You also have the right to withdraw your consent, if applicable, to the processing of your personal data by Diaverum at any time, with effect for the future. In addition, when you are no longer a patient with Diaverum, you will no longer be able to use the App and the data will be removed from the App's databases. Please note that parts of the data may be considered an integral part of your formal medical record and will therefore be subject to separate and different retention periods.

To the extent provided for by applicable data protection legislation, you also have the right to object to certain processing of your personal data, the right to request the restriction of the processing of your personal data, and the right to data portability. The right to data portability covers personal data that we process on the basis of an agreement between you and us or on the basis of your consent and that you have provided.

If you have any questions or concerns regarding Diaverum's processing of your personal data, please contact your clinic or use the contact information provided above.

If, in your opinion, Diaverum does not meet your expectations regarding privacy and data protection, you have the right to lodge a complaint with the National Data Protection Authority of your choice.
(e.g. to one of the IT authorities: Home - Garante Privacy).  

5. How we protect personal data

We take appropriate administrative, technical, and physical security measures to protect personal data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of personal data in our possession. We also take steps to destroy or permanently anonymize personal information when there is no longer a valid purpose for retaining the information. The types of measures we take vary depending on the type of information and how it is collected and stored.
Please note that no data collection or transmission can be guaranteed to be 100% secure. Therefore, although we strive to protect your personal data, we cannot guarantee the security of any data transmission.

We will never ask you for your authentication credentials in any unsolicited communication (including unsolicited correspondence, such as letters, phone calls, or emails). If you believe that your authentication credentials have been compromised, please contact your clinic immediately or use the contact information provided above.

All related data accessible via the d.CARE Patient app is stored on servers in Diaverum's data center located in Sweden. For users based in Russia, Saudi Arabia, Kazakhstan, or China, the data centers are located in their respective countries.  

6. Data transfers

We may transfer personal information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country where you initially provided the information. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy.

Diaverum is a global company. To provide our services, we may need to transfer your personal information between different countries. We comply with applicable legal requirements that provide adequate safeguards for the transfer of personal information to countries outside the European Economic Area or Switzerland.

7. Features and links to other websites

Our App may contain certain features for which we partner with other entities or provide links to other websites for your convenience and information. These features may include social networks, geolocation tools, and links to other websites or applications, each of which may not be owned or operated by Diaverum. These other features, websites, or mobile applications may have their own privacy policies or policies, which we strongly recommend you review. To the extent that the features or linked websites you visit are not owned or operated by Diaverum, we are not responsible for the content of the sites, the use of the sites, or the privacy practices of the sites.

8. Updates to our Privacy Policy

This Privacy Policy may be updated periodically and without notice to reflect changes in our personal data practices. In the App, we will ask you to review and agree to our revised Privacy Policy and to indicate at the top of the policy when it was most recently updated.

9. How to contact us

If you have any questions or comments about this Privacy Policy or if you would like to exercise your rights or update the information we hold about you or your preferences, you can contact your clinic or in writing using the address information above.

To help us respond to your request, please provide full details of the issue, including the fact that your request relates to the Diaverum d.CARE Patient app.