Privacy Policy

Effective date: 27 October 2026

SIGMUS TECHNOLOGIES LLP ("we", "us", "our") operates the Perfusion mobile app, the website at https://perfusionapp.com and the shop at https://shop.perfusionapp.com (together, the "Services"). This policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights you have. By using the Services you confirm that you have read this policy.

1. Who is responsible for your data

The data controller is SIGMUS TECHNOLOGIES LLP, 1st Floor, Sahara Center Building, Angadippuram, Perinthalmanna, Kerala, India 679321. You can contact us at contact@perfusionapp.com.

2. Data we collect

Information you give us

• Account data: full name, email address, password (stored only as a salted hash), country, and optional profile details such as phone number, profession, workplace, designation, bio and profile photo.
• Content you create: clinical datasheet entries, notes, quiz answers, chat messages with the AI assistant, job listings you submit, reviews and any files you upload.
• Messages you send to us through the contact form or email.
• Purchase information for 3D models and other digital products (order references and status). Card and bank details are handled by the payment provider or app store and are never stored by us.

Information collected automatically

• Device and app data: device type, operating system, app version, language, time zone and a push notification token if you allow notifications.
• Log and security data: IP address, request time, and sign-in events used to detect fraud and send new-device alerts.
• Approximate location derived from your IP address and the country you select. We do not collect precise GPS location.

Information from third parties

• If you sign in with Google (or Apple), we receive your name, email address, profile photo and a unique account identifier from that provider.

3. Sensitive and health-related data

Perfusion is a professional tool for perfusion and clinical education. Datasheets may contain clinical values. Do not enter information that identifies a patient (name, date of birth, hospital number, address, phone, photo, or any other direct identifier). Use anonymous references only. We do not intend to collect protected health information, and we ask you to comply with the privacy rules of your employer and country. If you believe you entered identifiable patient data by mistake, delete the entry or contact us immediately.

4. How we use your data and our legal bases

• To create and secure your account, verify your email and provide the Services (performing our contract with you).
• To store your datasheets, quiz history and chat conversations and show them back to you (contract).
• To process orders and give access to purchased digital products (contract).
• To send service emails such as verification, password reset and security alerts (contract and legitimate interests).
• To send push notifications and marketing emails only where you have opted in; you can withdraw consent at any time (consent).
• To keep the Services secure, prevent abuse and fix bugs (legitimate interests and legal obligation).
• To show sponsored content. Ads are shown by us and are not personalised using your personal data, and we do not use advertising identifiers (legitimate interests).
• To comply with legal obligations and respond to lawful requests.

5. AI features

The AI assistant and quiz generator send the text you submit to an AI service provider (currently OpenAI) so that a response can be produced. We do not allow the provider to use this content to train its models where this option is available. Do not include personal or patient-identifying data in prompts. AI output can be wrong; see our Medical & AI Disclaimer.

6. Who we share data with

We do not sell your personal data and we do not share it for cross-context behavioural advertising. We share data only with:

• Service providers acting on our instructions: hosting and database (Hostinger), email delivery (SMTP provider), push notifications (OneSignal), authentication (Google Firebase / Google Sign-In), AI processing (OpenAI), and payment providers or app stores for purchases.
• Other users, only for what you choose to make public, such as a job listing you publish.
• Authorities or professional advisers where required by law or to protect rights, safety and security.
• A buyer or successor if our business is reorganised, with the same protections for your data.

7. International transfers

We and our providers may process data in countries other than your own, including India and the United States. Where required, we rely on safeguards such as standard contractual clauses or an adequacy decision.

8. Retention

We keep account data while your account is active. When you delete your account we remove or anonymise your personal data within 30 days, except for records we must keep by law (for example order and tax records, normally up to 8 years) and minimal security logs kept up to 90 days. Backups are overwritten on their normal cycle, usually within 35 days.

9. Your rights

Depending on where you live (including the EU/UK under GDPR, California under CCPA/CPRA, India under the Digital Personal Data Protection Act 2023, and other countries) you may have the right to access, correct, delete, export, restrict or object to the processing of your data, to withdraw consent, and to complain to your data protection authority. You can:

• edit most data in the app under Profile;
• delete your account and data in the app (Profile > Delete account) or at https://perfusionapp.com/delete-account;
• email contact@perfusionapp.com to exercise any other right. We reply within 30 days.

We will not discriminate against you for exercising your rights.

10. Security

We use HTTPS encryption in transit, hashed passwords, access controls and rate limiting. No system is perfectly secure, so please use a strong, unique password and protect your device. If a breach affects your data we will notify you and the authorities as the law requires.

11. Children

The Services are intended for adults and healthcare professionals aged 18 or over. We do not knowingly collect data from children under 18 (or the minimum age in your country). If you think a child has given us data, contact us and we will delete it.

12. Cookies and similar technologies

The website uses only essential cookies and local storage needed to keep you signed in and secure. See our Cookie Policy.

13. Changes to this policy

We may update this policy. Material changes will be announced in the app or by email, and the effective date above will change. Continued use after the effective date means you accept the updated policy.

14. Contact and grievance officer

Questions or complaints: contact@perfusionapp.com, SIGMUS TECHNOLOGIES LLP, 1st Floor, Sahara Center Building, Angadippuram, Perinthalmanna, Kerala, India 679321. Our Grievance Officer details are on the Grievance Redressal page.