1. Introduction

BADDAS ("Biometric Anonymous Data-Driven Authentication System") is committed to protecting your privacy and ensuring the security of your personal and genomic information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Personal Information

• Name and contact information
• Healthcare provider credentials (for physician accounts)
• Authentication credentials

Protected Health Information (PHI)

• Genomic data and sequences
• Medical record identifiers
• Biometric authentication data

3. How We Protect Your Data

We implement industry-leading security measures including:

• End-to-end encryption: All data is encrypted using 256-bit AES encryption
• Blockchain verification: Data integrity is verified through immutable blockchain records
• Zero-knowledge proofs: Authentication without exposing underlying data
• Access controls: Role-based access with audit logging

4. HIPAA Compliance

BADDAS is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). We maintain administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of Protected Health Information (PHI).

5. Data Retention

We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law or for legitimate business purposes.

6. Your Rights

You have the right to:

• Access your personal and genomic data
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Obtain a copy of your data in a portable format
• Withdraw consent for data processing

7. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact our Privacy Officer at privacy@baddas.io.