Data Privacy - How we handle your data
We are fully committed to keeping your medical data safe.
Our Commitments
Privacy questions about health data deserve a direct answer
Your data is Protected
All Kaam Care data is stored securely using industry-standard encryption.
No advertising or data sharing
We never sell your data or share it for advertising; we only use the service providers needed to run the app.
You control everything
You have full patient control over your personal health records.
What Kaam Care staff
can and cannot access
Staff Access
Maintenance & Infrastructure
Engineers who manage Kaam Care infrastructure have access to system-level data for maintaining availability and security. This access is logged, controlled, and audited.
Customer Support
If you contact Kaam Care support with a question about your account or record, a support team member may access your account to help resolve the issue. This only happens when you initiate contact and request help.
Review of your Data
Kaam Care staff does not read your health records as part of normal operations. No one knows what your medical history looks like.
Sharing your Data
No Kaam Care employee is authorized to share, transmit, or discuss your health data with any party outside of Kaam Care, not with researchers, not with insurers.
Access to your details
Kaam Care staff cannot access your credentials or your full payment card details. Payment processing is handled by a PCI-compliant third-party level 1 processor.
Where your data lives
and how it's protected
Data Storage & Protection
Encryption at rest and in transit
All data is encrypted at rest in the database and encrypted in transit using TLS 1.3 or higher. Your records are never transmitted or stored in plain text.
HIPAA Compliant
Kaam Care is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA), Personal Information Protection and Electronic Documents Act (PIPEDA) and the principles of the Personal Health Information Protection Act (PHIPA) applicable to personal health records.
Access controls
Follows a zero-trust model with strict least privilege access policies. Multi-factor authentication (MFA) is enforced for administrative access (e.g., Digital Ocean: digitalocean.com/trust/hipaa-at-do)
System Monitoring
Audit logs track every access event or system change. Alerts and Web Application Firewalls (WAF) protect all public endpoints.
PCI-compliant payment processing
Payment information is processed by a PCI DSS-compliant third-party processor. Kaam Care never sees, stores, or handles full card numbers. Your billing details live outside our systems entirely.