Privacy Policy – Pulmify

Effective date: January 28, 2026

1. Introduction

Pulmify is a professional digital platform intended for licensed healthcare professionals within pulmonology and related fields. This Privacy Policy explains how Pulmify collects, uses, stores, and protects personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

2. Data controller

Pulmify is the data controller responsible for the processing of personal data on this platform.
For questions regarding privacy or data protection, users may contact:
Email: contact@pulmify.com

3. Personal data collected

Pulmify may collect and process the following categories of personal data:

  • Name, email address, and professional role
  • Account and profile information voluntarily provided by the user
  • Usage data (such as login activity, interactions, and technical logs)
  • Device and platform information (e.g. iOS, Android, web)
  • Documentation submitted for professional verification (e.g. a photo of an ID document, employment confirmation or licence certificate). Such documents are stored in private storage, are accessible only to Pulmify administrators through short-lived links, and are used solely to confirm that the user is a licensed healthcare professional. Users are asked to mask information not needed for this assessment.

Pulmify does not collect or process patient data.

4. Purpose of processing

Personal data is processed for the following purposes:

  • User authentication and account management
  • Platform functionality and communication
  • Security, moderation, and prevention of misuse
  • Improvement and development of the service
  • Compliance with legal obligations

5. Legal basis

Personal data is processed based on:

  • User consent
  • Performance of a contract (access to the platform)
  • Legitimate interests related to security and platform improvement
  • Legal obligations under applicable law

6. Data sharing

Personal data is not sold. Data may be shared with trusted service providers (such as hosting or analytics providers) solely to operate the platform and under appropriate data protection agreements, or when required by law.

7. Data retention

Personal data is retained only for as long as necessary to fulfil the purposes described above or to comply with legal requirements.

8. User rights

Users have the right to request access, correction, deletion, restriction, or portability of their personal data, and to withdraw consent where applicable.

9. Data security

Pulmify applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

10. Changes to this policy

This Privacy Policy may be updated from time to time. Users will be informed of material changes where required.