Privacy Policy

HealthAtoms is operated by HealthAtoms (Hormones River Media), the data controller for personal data processed through the Platform. For any privacy question or request, contact us at privacy@healthatoms.com.

•Account data: your email address and, optionally, your name.

•Profile and preferences: role, learning goal, fidelity level, audience and country/language choices.

•Learning activity: entries you read, courses you enrol in, labs you complete, items you save, progress, scores, and feedback you give.

•Technical and usage data: device and browser type, approximate location from IP, pages viewed, and similar diagnostics needed to run and secure the service.

•Payment data: when you buy something, payment is handled by our payment processor; we receive confirmation and limited billing details, not full card numbers.

We do not collect real health data. Synthetic lab data (invented patients) is not personal data.

Directly from you (when you register, set preferences, or contact us), automatically as you use the Platform (cookies and similar technologies), and from our processors (for example, authentication and payment confirmations).

To provide and secure the Platform, run your account, personalise your experience, track and save your learning progress, issue credentials you earn, process payments, respond to you, send service messages, improve content and reliability, and comply with legal obligations.

If you accept analytics cookies, we also record which pages and labs are opened, started and completed, so we can see which material is working and which is not. These records describe how the Platform is used — they never include the content of your lab work, and labs run on synthetic data only.

We do not sell your personal data, and we do not use it for third-party advertising.

Where European or UK data-protection law applies, we process your data to perform our contract with you (running your account and delivering the service), with your consent (optional communications and non-essential cookies), to meet legal obligations, and for our legitimate interests in securing, maintaining, and improving the Platform. You can withdraw consent at any time.

For users in India, we process personal data in line with the DPDP Act, 2023. We rely on your consent or other lawful grounds, use data for the purposes stated here, and honour your rights to access, correction, and erasure, and to nominate and to grieve. Our Grievance Officer can be reached at privacy@healthatoms.com; we aim to respond within the timelines the Act requires.

We share data only with service providers who process it on our instructions, under contract, to run the Platform — for example Supabase (database, authentication, storage, and the emails sent to verify your address or reset your password), our payment processor when you make a purchase, and the analytics providers named below if you have accepted analytics cookies. We may also disclose data if required by law or to protect rights and safety. We do not sell personal data.

Our primary database is hosted in the ap-south-1 (Mumbai) region. Where data is processed in another country, we use appropriate safeguards (such as standard contractual clauses or equivalent measures) as required by applicable law.

We use essential cookies for authentication and to remember your language preference. These are always active because the Platform cannot sign you in without them.

Analytics cookies are optional and off until you accept them. We ask on your first visit, and we do not load our analytics providers at all — nor set any of their cookies — unless you have accepted. Declining costs you nothing: every part of the Platform works either way, and you can change your choice at any time from Settings.

Our analytics providers are PostHog (product analytics, configured so that no personal profiles are created) and, where enabled, Google Analytics and Google Ads for measuring which campaigns bring people to the Platform. We use them to understand which pages and labs are actually used, so we can improve them. You can also control cookies through your browser settings.

We keep your personal data while your account is active and as needed to provide the service, meet legal and accounting obligations, and resolve disputes. When you delete your account, we remove or anonymise your personal data after a short grace period, except where we must retain certain records by law.

Subject to applicable law, you can request access to your data, correction of inaccurate data, a copy in a portable format, deletion, restriction of or objection to certain processing, and withdrawal of consent. To exercise any right, email privacy@healthatoms.com. You also have the right to complain to your local data-protection authority.

We apply technical and organisational safeguards including row-level security, least-privilege access, encryption in transit, and audit logging. No system is perfectly secure, but we work to protect your data and to notify you and the authorities of a breach where the law requires.

The Platform is intended for professionals and students who meet the minimum age set by local law. We do not knowingly collect personal data from children below that age; if you believe a child has provided us data, contact privacy@healthatoms.com and we will remove it.

We may update this policy; we will post the new version with an updated date and, for material changes, notify you in-product. Questions or requests: privacy@healthatoms.com.