Privacy Policy

Last updated: August 13, 2026

EyeCon ("EyeCon", "we", "us") is a communication and rehabilitation platform for patients with disorders of consciousness, developed at the Applied Neurophysiology Lab, Rambam Health Care Campus, and used by therapists, caregivers, and clinical partners. This policy explains what information we collect, how we use it, and how you can contact us about it.

Information we collect

Inquiry form: when you submit our public "request an assessment" form, we collect your name, email address, and phone number so a member of our clinical team can follow up.
Account information: when a therapist creates a caregiver account, we collect the caregiver's name, email, and phone number to provide login access and send account-related communications.
Clinical and session data: for patients under active care, EEG/EMG session recordings, protocol progress, and clinician notes are collected and stored to deliver and document the therapy.
Documents: intake documents uploaded by caregivers during onboarding, reviewed by the assigned therapist.
Payment information: license/payment transactions are processed through our payment provider; we do not store full card numbers ourselves.

How we use your information

To respond to assessment requests and schedule bedside evaluations.
To create and manage caregiver and therapist accounts.
To send transactional email and SMS notifications tied to your own actions: welcome/login messages, password resets, payment links, document-upload confirmations, and intake follow-up requests.
To deliver and review therapy sessions between patients, caregivers, and therapists.
To process license and evaluation payments.

We do not send marketing or promotional email or SMS, and we do not sell or share your information with third parties for their own marketing purposes.

How we store and protect your information

Data is stored on infrastructure operated by Amazon Web Services (AWS) in the EU (Frankfurt) region, including encrypted database storage and object storage for documents and session recordings. Live video sessions between therapists and caregivers are delivered via LiveKit. Access to clinical and account data is restricted to the assigned therapist, authorized clinical staff, and the caregiver's own account.

Email and SMS notifications

We send email via Amazon Simple Email Service (SES) and SMS via Amazon SNS. Every message is triggered by a specific action you or your therapist take in the product — there is no bulk or purchased mailing list. Bounced or complained-about email addresses are automatically suppressed from future sends. If you no longer wish to receive non-essential notifications, you can update your preferences in your account settings or contact us below; account-security messages (such as password resets) will continue as needed to keep your account safe.

Third parties we work with

Amazon Web Services (AWS) — hosting, storage, email (SES), and SMS (SNS) delivery.
LiveKit — real-time video for therapy sessions.
Our payment processor — license and evaluation payments.

We do not sell your personal information to any third party.

Data retention

We retain account and clinical data for as long as your account is active or as needed to provide ongoing care, and as required by applicable clinical record-keeping obligations. You may request deletion of your account data, subject to any clinical or legal retention requirements, by contacting us below.

Your choices

You may request access to, correction of, or deletion of your personal information.
You may opt out of non-essential email/SMS notifications from your account settings.
You may contact us at any time with privacy questions or requests.

Contact us

For any privacy questions, requests, or concerns, contact us at support@eyecondoc.com.