Privacy Policy
Last updated: July 22, 2026
CURE Biomedical ("CURE," "we," "us," or "our") operates the Cynch Remote platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our remote assistance services.
1. Information We Collect
Account Information. When you create an account, we collect your name, email address, and password (stored as a salted hash — we never store plaintext passwords).
Session Data. During remote assistance sessions, we collect video and audio streams, photographs, device identifiers (e.g., make, model, serial number), session metadata (timestamps, duration), and any notes or annotations created during the session.
Device Information. We collect information about the devices used to access our service, including hardware model, operating system, and unique device identifiers.
Usage Data. We automatically collect information about how you interact with the platform, including pages visited, features used, and session activity logs.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Cynch Remote platform
- Facilitate real-time remote assistance sessions between technicians and experts
- Store session recordings for training, quality assurance, and compliance purposes
- Look up medical device information from FDA databases for troubleshooting
- Send service-related communications (e.g., session invitations, account notifications)
- Ensure the security and integrity of our services
3. Data Storage and Security
Your data is stored on Cloudflare's globally distributed edge network. All data is encrypted in transit (TLS 1.3) and at rest. Session recordings and files are stored in Cloudflare R2 object storage. User account data is stored in Cloudflare D1 databases.
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Within your organization: Session data is accessible to authorized users within your Cynch Remote account (admins, super admins, and invited experts).
- Service providers: We use Cloudflare for infrastructure, Resend for transactional emails, a licensed SMS delivery provider for text-message alerts, and FDA public databases for device lookup. These providers process data only as necessary to provide their services. We do not share the mobile numbers or SMS opt-in consent you provide with any third party for their own marketing, and we never sell them.
- Legal requirements: We may disclose your information if required by law, regulation, or legal process.
5. Data Retention
Account information is retained for as long as your account is active. Session recordings and files are retained according to your organization's configured retention policy. You may request deletion of your account and associated data at any time by contacting your administrator or emailing [email protected].
6. Medical Device Information
Cynch Remote accesses publicly available FDA GUDID (Global Unique Device Identification Database) information for device lookup and troubleshooting assistance. This information is public data provided by the U.S. Food and Drug Administration. Cynch Remote does not access, store, or process protected health information (PHI) or patient data.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to or restrict processing of your information
- Data portability
To exercise these rights, contact us at [email protected].
8. Children's Privacy
Cynch Remote is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.
9. SMS / Text Messaging
Cynch Remote offers optional SMS text-message alerts to experts, used solely for operational, transactional purposes — notifying an on-call expert that a support call is pending and relaying two-way messages during that call. We do not send marketing or promotional text messages.
Consent. SMS alerts are strictly opt-in. An expert enables them by entering their own mobile number in their account profile (Profile → Call Notifications) and checking a box that expressly consents to receive these messages. Consent is never a condition of using the platform, and no numbers are purchased or obtained from third parties.
Message frequency and cost. Message frequency varies based on call activity. Message and data rates may apply, depending on your mobile carrier and plan.
Opting out and help. You can cancel SMS alerts at any time by replying STOP to any message, or by unchecking SMS notifications in your profile. Reply HELP for assistance. For support, email [email protected].
How we handle your number. Mobile numbers collected for SMS alerts, and the consent associated with them, are used only to deliver these operational alerts. We do not sell this information, and we do not share it with third parties or affiliates for their marketing purposes. Numbers are shared only with our SMS delivery provider strictly to transmit the messages you have opted in to receive.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy, contact us at:
CURE Biomedical
Email: [email protected]
