# Privacy policy This Privacy Policy describes how Lattice Innovations Pvt Ltd (“we,” “us,” or “our”) collects, uses, and shares information through the NeoPORT Lite Android application. This app is designed to document the usage of infant warmers for neonatal stabilization and transport. This app is designed for use by a data collection agency, duly authorized by the manufacturer of infant warmers. Data is NEVER collected by Lattice Innovations personnel or affiliates. ### 1. Information We Collect We collect the following types of information: #### User Account Information * Phone Number: All users (Data Collectors, Administrators, and Viewers) must log in using their mobile phone number via Firebase Authentication. This is required for SMS-based One-Time Password (OTP) verification. #### Patient and Clinical Data Data collectors input information regarding infant warmer usage, which includes: * Personally Identifiable Information (PII): Mother’s name and ID types (such as Aadhaar, ABHA ID, or health card numbers). Note: Per our data minimization recommendations, identifiers are collected only as required by the data collection agency. * Sensitive Health Data: Baby’s sex at birth, birth weight, and body temperature readings at the time of device usage and handover. * Facility Information: The location and type of healthcare facility (e.g., PHC, CHC) where the device was used. #### Technical Data * Role-Based Access: We track user roles (Owner, Admin, Viewer, or Data Collector) to enforce security rules and access control. ### 2. How We Use Information We use the collected data for the following purposes: * Service Delivery: To record and track infant warmer utilization and patient outcomes for clinical monitoring. * Authentication: To verify user identities and prevent unauthorized access to the application. * Oversight: To allow administrators and program funders (viewers) to monitor and audit data collection in real-time. * Data Export: To provide administrators with downloadable reports (CSV format), where PII is masked with unique strings to protect patient privacy. ### 3. Data Sharing and Third-Party Services We do not sell user or patient data. Data is shared only with the following entities: * Manufacturer of infant warmers: As the primary owner of the data, the manufacturer has full access to the records created by their implementation partners. * Firebase (Google): We use Firebase Authentication and Cloud Firestore for backend data storage and user management. Data processing is subject to Google’s privacy standards. * Google Play Store: Necessary for app distribution and maintenance. ### 4. Data Security & Protection We implement technical and organizational measures to safeguard data: * Role-Based Access Control (RBAC): Firebase Security Rules ensure that data collectors can only access their own records, while viewers have read-only access. * PII Masking: Identity details are masked in CSV exports to minimize the risk of data exposure. * Compliance: Our data collection practices are designed to adhere to the Digital Personal Data Protection (DPDP) Act requirements of purpose and proportionality. ### 5. Out of Scope Data The NeoPORT Lite application does not collect the following: * Real-time Location Tracking: No GPS or network-based location tracking is utilized. * Offline Data: The app requires an active internet connection and does not store data locally for offline use. ### 6. User Rights Users may contact the Owner to: * Deactivate their account (historical data will be retained for audit purposes). * Correct or update facility information. * Delete individual records. * Perform a complete data wipe of the entire system, leaving only the Owner's login credentials. To contact the Owner, please write to . ### 7. Contact Information For questions regarding this Privacy Policy or data protection, please contact: Lattice Innovations Pvt Ltd C 25, Okhla Industrial Area, Phase I Delhi 110020, India Email: Website: [www.thelattice.in](http://www.thelattice.in) --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://www.neoport.org/privacy-policy.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.