Privacy policy

1. Summary

Altopi is still being built. Today the site has no accounts and does not ask you for any personal information. This policy describes what happens now and what will happen once registration opens.

2. Who is responsible

The legal name and address of the operator of Altopi, and how to reach the person responsible for privacy, will be added here before registration opens.

3. What is collected today

Today, altopi.com is a set of information pages.

• No accounts or forms. The site does not collect your name, email or health information.
• No tracking. The site does not use advertising or analytics trackers, and does not set tracking cookies.
• Hosting records. The site is hosted by Netlify. Like any web host, it may process technical details such as your IP address and browser type to deliver pages and keep the service secure.

4. What will be collected when accounts open

When registration opens, Altopi will collect only what is needed to run the service:

• Account details: name, email, country and login details.
• Health concerns: what you write when you ask for a second opinion. This is sensitive information and is treated as such.
• Professional details: profession, licence number and issuing body, used to verify professionals.
• Opinions: what professionals write in reply to a concern.
• Payment details: handled by Stripe, including Apple Pay. Altopi will not store your card number.

5. Private by default

Your profile and your concerns are private by default.

• A private concern can be seen by you and by approved professionals reviewing it, who see the concern without your name.
• A concern is shown publicly only if you explicitly choose to share it. You can make it private again at any time.
• Altopi does not sell personal information.

6. How information is used

• to create and secure your account;
• to show your concern to professionals so they can give an opinion;
• to verify that professionals are who they say they are;
• to process payments;
• to meet legal obligations and keep the service safe.

7. Who it is shared with

Altopi uses service providers to run the site, and shares information with them only as needed to do so:

• Netlify for hosting the website;
• Supabase, planned, for the database and login service;
• Stripe, planned, for payments.

Information may also be disclosed where the law requires it.

8. Where information is stored and international use

People and professionals can use Altopi from anywhere in the world, so information may be stored and viewed in countries other than your own, which may have different privacy laws. The storage location will be stated here before registration opens.

9. How long it is kept

Information will be kept while your account is open and for as long afterwards as the law requires. Specific retention periods will be stated here before registration opens.

10. Your choices and rights

Depending on where you live, you may have the right to see, correct, export or delete your personal information, and to withdraw consent. Once accounts open, you will be able to ask for any of these using the contact details below.

11. Security

Information will be encrypted when it is sent and stored, and access will be limited to what each person needs. No system is perfectly secure; if a breach affects you, you will be told as the law requires.

12. Health privacy laws

Health information is protected by specific laws in many places, such as HIPAA in the United States, PHIPA and PIPEDA in Canada, and the GDPR in Europe. Altopi will not accept real health information until the agreements and safeguards those laws require are in place.

13. Children

Altopi is not intended for children to use on their own. Age requirements will be stated here before registration opens.

14. Changes and contact

This policy will be updated as Altopi develops. The date at the top shows the latest version.

Contact details will be published here before registration opens. See also the Terms of use.