Privacy Policy
Effective date: August 2, 2026
Last updated: October 25, 2026
This policy explains how Daloreum, doing business as sofidex ("sofidex," "we," "us"), collects, uses, discloses, and retains personal information through the sofidex website and service.
The patient service uses the worldwide opt-in controls described below. The state-rights sections also describe rights relevant to United States residents.
Patient privacy choices
On the patient site there is nothing optional to choose, because there is nothing optional being collected. sofidex records no patient browsing activity, no reading history, and no health-related usage data — for anyone, anywhere, with or without consent. There are no analytics events, no health-topic records, no behavioural profiles, and no commercial audience reports built from patient activity. Declining nothing is required: the collection simply does not exist.
What the service necessarily holds to work — your account, purchases, saved pages, notes and the conversations you ask for — is listed in section 2, and all of it can be exported or deleted from your account page. Advertising, if enabled on eligible reading pages, asks for your permission on the page itself and never loads without it. The optional newsletter is described at the end of this policy.
Automatic operational monitoring
We automatically monitor the operation of the service using account, payment, model-call, job, security and publishing records. Administrator dashboards use aggregate operational measurements; this does not enable optional browsing profiles. We also count clicks on our Amazon links in sitewide daily totals. The counter does not receive or store your account/browser identifier, referring page, article URL, product name, query or click time within the day. Its browser request omits cookies and referrer information. Counts are retained for up to one year and are not included in individual histories or commercial audience reports. Existing network/security protections still apply to requests. A click is not proof of an order; Amazon reporting is required for attributed orders and commissions.
1. HIPAA and patient information
sofidex is not a HIPAA-enabled service. We do not act as a business associate, no Business Associate Agreement is available, and nothing in this policy should be read as a HIPAA notice.
Do not submit protected health information or any information that identifies a patient, including in search queries, the drug interaction checker, or support correspondence.
2. What we collect
You give us:
- Account information — email address, first name, last name, and a password. The password is stored only as an Argon2id hash; we never hold the password itself.
- Payment information — handled by Stripe. We receive and store your Stripe customer and payment identifiers, the amount, currency, status, and invoice links. We never receive or store your card number, expiry, or security code; those are entered on Stripe's own pages.
- Support correspondence — anything you send us.
You generate by using the service:
- Search queries you type into the library and the drug interaction checker.
- Saved content — the articles you bookmark or save. On the patient site we do not record which articles you open, how far you read, or how long you spend.
We collect automatically:
- Session records — your IP address and browser user-agent string, recorded when you sign in, so you can review and revoke your own sessions.
- Security records — failed sign-in attempts and rate-limiting counters keyed to an IP address.
- Clinical diagnostic events — page paths, navigation, JavaScript errors, failed network requests, page-load performance measurements, and the identity of elements you click (tag, id, label, or the first few words of visible text). Form values and anything you type are never captured. These carry a random per-browser and per-tab identifier and, if you are signed in, your account id.
- Administrative audit records — where a member of staff takes a consequential action on an account, we record who did it, what changed, why, and the IP address and user-agent it came from.
We do not collect: date of birth, telephone number, precise location, biometric data, device advertising identifiers, or an advertising profile of your interests. Optional patient reading history is described above.
3. What we do not do
- We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by U.S. state privacy laws.
- Third-party advertising scripts are disabled on the patient site. The prepared future Google AdSense integration remains off until account setup and launch review are complete.
- We do not use your data to train any AI model, and we do not permit our providers to train on it. sofidex does use AI — it writes and answers from our own articles — and what it does and does not do is set out in the AI Disclosure.
- Transactional email — verification, password reset, and billing notices — is always sent. The only other email is the optional Sofidex newsletter described below, which you choose on your account page and can leave with one click; we never send any other marketing email.
4. How we use it
- to create and authenticate your account and keep you signed in;
- to give you access to the content you have paid for;
- to take payment and manage subscriptions, renewals, invoices, and refunds;
- to show you your own bookmarks and reading history;
- to answer your support requests;
- to detect and prevent fraud, abuse, credential sharing, and security incidents;
- to find and fix faults and to measure and improve performance;
- to keep the audit and financial records we are required to keep; and
- to comply with law and valid legal process.
5. Who receives it
The infrastructure and service providers below support the site. Optional patient data is not sent to third-party analytics or advertising trackers. Configured AI providers receive questions and relevant passages to fulfill requested answers, as described in the AI Disclosure. Any commercial aggregate recipient must be separately reviewed and recorded.
| Provider | What they receive | Why | Where |
|---|---|---|---|
| Stripe | Your email, name, card details you enter on their pages, and your subscription and payment history | Payment processing and subscription billing | United States |
| Hetzner Online GmbH | All hosted data, as our infrastructure provider | Servers and storage | Germany |
| Cloudflare | Your IP address and the requests you make, in transit | DNS, content delivery, and protection against attack | Global |
| U.S. National Library of Medicine, and openFDA (U.S. Food and Drug Administration) | The medicine names you type into the interaction checker, when we do not already hold the answer locally | Drug vocabulary and labeling lookups | United States |
Email we send you (verification, password reset, billing) is delivered by a mail service operated by us on our own infrastructure.
We may also disclose personal information to professional advisers; to authorities where reasonably necessary to comply with law, respond to valid process, or protect rights and safety; and to a counterparty in a merger, acquisition, or sale of assets, subject to appropriate protections.
6. Where your data is held
Our servers are located in Germany. Although sofidex is offered in the United States, the database, backups, and application run on infrastructure in the European Union. Personal information is therefore transferred to and stored outside the United States. Stripe processes payment data in the United States.
7. How long we keep it
| Record | Retained |
|---|---|
| Account record | For the life of the account. On deletion it is anonymised rather than removed — see section 9. |
| Sessions and verification tokens | Deleted 7 days after expiry. |
| Diagnostic events | Deleted after 30 days. |
| Fault records (the grouped summary of a recurring error, without individual event detail) | Kept indefinitely. |
| Payment, invoice, subscription, and refund records | Kept indefinitely, for accounting, tax, and audit purposes, and survive account deletion. |
| Administrative audit records | Kept indefinitely and never modified or deleted. This is deliberate: an audit log that can be edited is not an audit log. |
| Bookmarks and saved pages | For the life of the account. Patient reading history is not recorded at all. |
| Backups | Daily backups are retained 14 days, weekly 8 weeks, and monthly 12 months, after which they are overwritten. Data you delete persists in backups until those windows pass. |
8. Security
Passwords are hashed with Argon2id. Session tokens are stored only as SHA-256 hashes, so a copy of our database could not be replayed as a login. Session cookies are HttpOnly, Secure, and SameSite=Lax. Staff sessions are shorter than member sessions, staff accounts can require two-factor authentication, and every consequential administrative action is recorded with a reason. Sign-in is rate-limited and accounts lock temporarily after repeated failures.
No system is completely secure and we cannot guarantee security. Report a suspected vulnerability or incident to [email protected].
9. Deleting your account
You can delete your account yourself from your account settings; it requires your password. When you do:
- any active subscription is cancelled with Stripe;
- your sessions, verification tokens, and two-factor secret are permanently deleted;
- your account record is anonymised in place — your email is replaced with a non-routable placeholder, your name is replaced, and your password hash is removed; and
- your payment, subscription, and audit history is retained, because we are required to keep financial and audit records. It remains linked to an account row that no longer identifies you.
On the patient side, account deletion removes saved pages, conversations, linked optional browsing records and patient diagnostic records. Financial records remain associated with the anonymised account. Clinical records follow the clinical account controls; clinical diagnostic events age out after 30 days.
If you want your data erased more completely than this, contact [email protected] and we will tell you specifically what we can and cannot remove, and why.
10. Your choices and state privacy rights
You can view and change your account details, change your password, see and revoke your active sessions, and download a copy of your data — account details, subscriptions, payments, entitlements, bookmarks, reading history, and sessions — from your account settings at any time.
Depending on your state and subject to exceptions, you may have the right to request access, correction, deletion, or portability; to obtain information about disclosures; to opt out of sale, sharing, targeted advertising, or certain profiling; or to appeal a refused request. Individual-level sales, cross-context advertising and profiling that produces legal or similarly significant effects are disabled. Optional aggregate commercial contributions have a separate opt-in and can be withdrawn at /patients/privacy. We will not discriminate against you for exercising a right.
Submit a request to [email protected]. We will verify it using information reasonably related to the request and respond within the period the applicable law requires. To appeal a decision, reply to it and say you are appealing; a different person will review it.
On patient pages, Global Privacy Control and Do Not Track disable all optional collection and withdraw existing optional permissions for that browser profile. You can also use the privacy controls without a browser signal.
11. California
California residents should read sections 2, 4, 5, 6 and 7 for the categories of personal information collected, the sources, the purposes, the recipients, and the retention periods. We collect the categories described in section 2; we disclose them to the service providers listed in section 5 for the purposes stated there; and we do not sell or share personal information. We do not use or disclose sensitive personal information for purposes beyond those permitted without an obligation to offer a limitation right.
12. Children
An account requires you to be at least 18. The patient side is free to read without one, and a child may read it as anyone may read a public health page, but sofidex is not designed or directed for children and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us information, contact [email protected] and we will delete it.
13. Other sites, and paid links
Third-party sites we link to have their own privacy practices. This policy does not govern them.
Some links to products are paid: sofidex earns a commission on qualifying purchases made through them, and every page carrying one says so above the article. We send the retailer nothing about you. The link carries an identifier for sofidex, not for you — no account, no email, no search history, nothing you have read or saved. What the retailer then records about your visit is between you and them, under their own privacy policy, exactly as if you had typed their address yourself. We are told how many purchases followed our links, never who made them.
14. Changes
We may update this policy. We will post the updated version and revise the date above. Where a change materially affects how we use information already collected, we will give additional notice and obtain consent where required.
15. Contact
Daloreum d/b/a sofidex
Attn: Privacy
Email: [email protected]
If you need a postal address for a formal notice, request one at [email protected] and we will provide it.
Patient newsletter
Newsletter signup is a separate, unchecked choice. We store your subscription choice, consent date, notice version, source and unsubscribe date linked to your account. Only subscribed, active accounts with verified email addresses are eligible. We do not select newsletter recipients using medical questions or browsing history. Each campaign includes an unsubscribe link; you can also turn newsletters off in your account. Account/security emails are separate. Provider acceptance is not proof of delivery or reading. We do not track newsletter opens. Subscription data is included in your export and removed with account deletion. Delivery records and inactive subscription records are removed after 400 days; active preferences remain while subscribed. Campaign content contains no recipient list. Our email provider receives your email address and the message to deliver it.