Privacy Policy

At HealthChain, privacy is not an option; it's the foundation of our architecture.

1. Data Ownership

All data uploaded to HealthChain is encrypted client-side. The encrypted blobs are stored on IPFS. The decryption keys are held solely by you (the patient). HealthChain developers possess no "master key".

2. Blockchain Transparency

While your actual medical data is encrypted and hidden, the transactions (e.g., "User A granted access to Doctor B") are public on the Polygon blockchain. This ensures an immutable audit trail of who accessed your records and when.

3. Third-Party Access

No third party can access your data unless you explicitly sign a smart contract transaction granting them permission. You may revoke this permission at any time, instantly cutting off access.