Last updated: 27 August 2026
The HiRO Patient App is operated by:
• Company: HiRO Health SLU
• Address: Av Diagonal, 433 bis 3.2, Barcelona, Spain, 08036
• Email: info@hiro-health.com
This policy applies to patients and users of the HiRO Patient App. Healthcare professionals are governed by a separate privacy policy.
The HiRO Patient App is a digital health tool designed to connect patients directly with their assigned doctors. Through the app, patients can:
• Communicate with their assigned doctor via real-time chat
• Receive medical advice and recommendations from their doctor
• Access and review stored advice and guidance provided during their care
• Manage their healthcare journey in one secure place
All communication and data within the app takes place exclusively between the patient and their assigned doctor. The personal and interaction data collected through the app is used solely to provide and support these healthcare services.
Your information collected through HiRO will be stored and processed on HiRO's servers. Only those registered within the HiRO health app as doctors, and third-parties employed by HiRO, will have access to your data. Otherwise, data is only accessed by its respective owner.
HiRO retains your personal, account, communication, and healthcare-related information for as long as necessary to provide and support the healthcare services, maintain appropriate healthcare records, comply with applicable legal and regulatory obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements.
While your account remains active, information required to provide and support your healthcare services may be retained as part of your patient record and healthcare history.
You may request deletion of your personal data by contacting us at info@hiro-health.com. Where deletion is legally and technically possible, HiRO will delete or anonymise the information associated with your account.
Certain healthcare records, security logs, or other information may need to be retained for a longer period where required by applicable legal, regulatory, healthcare, or contractual obligations. Where such retention is required, the information will be retained only for the applicable required period.
Information stored in backups may remain temporarily after deletion while backup systems are securely rotated or overwritten in accordance with our backup and recovery procedures. When the applicable retention period expires, retained information will be securely deleted or anonymised.
HiRO cares about the security of your information. We use appropriate safeguards to preserve the integrity and security of all information collected through HiRO. To protect your privacy and security, we take reasonable steps (such as secured passwords) to verify your identity before granting you access to your account.
You are responsible for maintaining the secrecy of your password and account information, and for controlling access to your information at all times. Patients are given unique passwords to share with their doctors for information access. HiRO does not take responsibility for any disclosure of your account password.
Your privacy settings may also be affected by changes to the functionality of third-party services that HiRO uses. HiRO is not responsible for the functionality or security measures of any third party.
We value your trust in providing us your personal information and strive to use commercially acceptable means of protecting it. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee its absolute security.
To help us understand general audience demographics and measure the effectiveness of our advertising campaigns, the HiRO Patient App uses the Meta (Facebook) SDK. This tool allows Meta to collect limited, non-sensitive data such as:
• General device information and identifiers (e.g., Advertising ID)
• Broad, anonymised location and demographic signals
• Aggregated app interaction data for ad performance measurement
No health, medical, clinical, or communication data is ever shared with Meta. Doctor-patient chat messages and stored advice remain fully private and are never accessible to Meta or used for advertising purposes. The Meta SDK is used solely for general advertising analytics and audience insights. Meta processes this data under their own Data Policy, which you can review at https://www.facebook.com/policy.php.
■ In accordance with GDPR (EU 2016/679) and Spanish data protection law (LOPDGDD), the Meta SDK is only activated after you provide explicit consent through the in-app cookie and tracking consent prompt. You may withdraw consent or opt out at any time through your device's advertising settings or by contacting us at info@hiro-health.com.
Under GDPR and applicable Spanish law, you have the right to:
• Access your personal data
• Correct inaccurate or incomplete information
• Request deletion of your data (where legally permitted)
• Restrict or object to processing
• Withdraw consent at any time, including consent for advertising tracking
• Data portability
To exercise any of these rights, please contact us at: info@hiro-health.com
In the event that any information under our control is compromised as a result of a security breach, HiRO will take reasonable steps to investigate the situation and, where appropriate, notify affected individuals and take other steps in accordance with any applicable laws and regulations.
Our app only opens content from our own website patient.hiro-health.com, which we control completely. It does not load content from or redirect to any other external origin.
These services do not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If we discover that a child under 18 has provided us with personal information, we will immediately delete it from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can take the necessary action.
We may update this Privacy Policy from time to time. You are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted.
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us:
• Company: HiRO Health SLU
• Address: Av Diagonal, 433 bis 3.2, Barcelona, Spain, 08036
• Email: info@hiro-health.com
© 2026 HiRO Health SLU. All rights reserved.