Privacy policy

What data RitmioT processes, what for, who it is shared with, how long it is kept and how to exercise your rights.

In force since October 12, 2026. It applies to the patient app (iPhone and Android), the web platform used by physicians and their team, and the first-visit questionnaire.

This is a courtesy translation. If there is any discrepancy, the Spanish version, Política de privacidad, prevails.

1. Who is responsible

Three Orange SAS is responsible for the RitmioT database and operates the platform. The contact is Augusto Parra, at developer@ritmiot.com.ar.

RitmioT works for the physicians who enroll patients in their follow-up program. Clinical decisions always belong to the treating physician. RitmioT is a clinical decision support tool: it does not diagnose or replace medical evaluation. For an urgent symptom, the patient must contact their physician or the emergency services.

2. What data is processed

From patients

• Identification and contact: name, ID number, date of birth, sex, email, mobile phone, address and health coverage. They are entered by the physician or their secretary.
• Health data: what the ring measures (heart rate, oxygen saturation, steps and type of activity), the clinical studies and documents that are uploaded, diagnoses, medication, the physician's notes and the answers to the first-visit questionnaire.
• From the phone: altitude, the battery level of the phone and the ring, the ring's identifier and the app version.

The phone's location, with a precision of about 1 km, is used on the phone itself to request the local weather and to tell whether the patient is walking or traveling in a vehicle. The position is not stored; only the altitude is, because it changes the expected oxygen saturation. If the patient does not grant location permission, monitoring keeps working without altitude or weather.

If the patient chooses to answer the questionnaire by speaking, the audio is transcribed and is not stored. Before saving, the patient confirms what was understood.

From physicians and their team

Name, email, phone, specialty and license number, and a log of which medical records they view or modify, with date, time and IP address.

3. What it is used for

• So that the physician can follow the patient's progress: trends, alerts for out-of-range values and a decision-support assessment with the clinical guidelines cited.
• To read the studies that are uploaded and move their data into the medical record, for the physician to review.
• To send the patient, by WhatsApp, the notices decided by their physician, such as the link to the first-visit questionnaire.
• System security: recording who accesses each medical record.

The data is not used for advertising, is not sold and is not transferred for commercial purposes.

4. Who it is shared with

A patient's data is seen by their treating physician and the health team that physician authorizes. The physician's secretary sees contact details and the questionnaire status, never diagnoses, studies or assessments. Technical administrators access it only to maintain the system.

The data is stored on servers located in Argentina. To operate, the platform uses these third-party services:

• Anthropic, PBC (United States): the artificial intelligence used to read studies and prepare decision support for the physician. It receives clinical data only to process it and, under its commercial terms, does not use it to train its models.
• ElevenLabs (United States): transcribes the spoken answers to the questionnaire, only if the patient chooses to answer by voice.
• Twilio (United States): sends the WhatsApp notices. It receives the patient's name and mobile number, never clinical data.
• OpenWeather (United Kingdom): returns the temperature and humidity of the location. It receives a position rounded to about 1 km, without the name or any data that identifies the patient.

The United States is not among the countries that the Argentine authority considers to have adequate protection. These transfers are made with the patient's consent, which the patient accepts upon joining the program. Data is also delivered to an authority when required by law or by a court order.

5. How long it is kept

• Original documents (PDF files and photos of studies): deleted 60 days after upload. What was extracted from them stays in the medical record.
• Medical record and measurements: for as long as follow-up lasts and, afterwards, for the period set by the regulations on medical records.
• Access log: kept so that it is possible to audit who viewed or modified each medical record.

6. How it is protected

• Every connection to the platform and to the app travels encrypted (HTTPS).
• Each person signs in with their own user and sees only what their role allows: the physician, their patients; the patient, their own data.
• Every access to a medical record is logged, including rejected attempts, in a log that cannot be altered without it being noticed.

7. Your rights

The patient may at any time request access to their data, rectify, update or delete it, object to its processing and withdraw consent, which suspends monitoring. This is requested by writing to developer@ritmiot.com.ar or through the treating physician.

Access requests are answered within ten calendar days, and rectification or deletion within five business days, as established by Law 25.326. Whatever is part of a medical record that the physician is required to keep is blocked rather than deleted.

The holder of personal data has the right to exercise the right of access to it free of charge at intervals of not less than six months, unless a legitimate interest is shown, pursuant to Article 14, paragraph 3 of Law No. 25.326. The Agency for Access to Public Information, as the Supervisory Authority of Law No. 25.326, has the power to handle complaints and claims filed by those whose rights are affected by non-compliance with the rules in force on personal data protection. Website: www.argentina.gob.ar/aaip.

8. Minors

If the patient is a minor, consent is given by their legal representative, who is also the person who exercises their rights over the data.

9. Changes to this policy

If something substantive changes, the app shows the updated consent and asks the patient to accept it again. The effective date above indicates the current version.

10. Contact

Three Orange SAS · Augusto Parra · developer@ritmiot.com.ar · San Miguel de Tucumán, Argentina.