Privacy policy

1. Who we are

eMazeBrain is a product of eMazeLabs Ltd. For any privacy question, or to exercise a right described below, contact drhish@emazelabs.com.

2. This website

What we collect

• Information you give us. When you submit the demo form we collect your name, work email, discipline, practice size and anything you write in the message field.
• Basic technical information. Standard server logs generated when a browser requests a page.

What we do with it

• Respond to your enquiry and arrange a demonstration.
• Keep a record of the conversation so we do not ask you the same questions twice.
• Understand which pages are useful, in aggregate.

What we do not do

• We do not sell your information.
• We do not add you to a marketing list because you requested a demo.
• We do not use your enquiry to contact your patients.

Our lawful basis for processing enquiry data is your consent, given when you submit the form, and our legitimate interest in responding to a business enquiry. You can withdraw consent at any time by emailing us.

3. The eMazeBrain platform

When a provider or organisation uses eMazeBrain with a child, that provider or organisation is the controller of the resulting clinical information. eMazeLabs acts as a processor, handling the information on their instructions and under a Business Associate Agreement or Data Processing Agreement as applicable.

What the platform processes

• Account information for the provider and for the child's account.
• Assessment responses.
• Training activity: which games were played, when, for how long, and how the child performed.
• Program configuration set by the provider, and any clinical notes the provider records.

How it is used

• To compose and adjust the child's training program.
• To present adherence, performance and trend information to the supervising provider.
• To operate, secure and support the service.

Commitments

• We do not sell clinical data, to anyone, for any purpose.
• We do not use identifiable patient data to train machine-learning models.
• We do not use clinical data for advertising.
• The provider's organisation owns its clinical data and can export it at any time.

4. Children

The platform is used with children, and is only ever provided through a licensed provider or an educational organisation that holds the relationship with the child and the family. We do not market to children and there is no consumer route to purchase. Where a child is under thirteen, we handle their information consistently with COPPA and rely on the provider or school to have obtained the appropriate parental or guardian authorisation. In educational settings, information constituting a student education record is handled consistently with FERPA.

5. Sharing

We share information only with service providers who help us operate the platform — hosting, infrastructure, communications — under contract and only to the extent required to deliver the service. A current subprocessor list is available on request. We may disclose information where legally required, and will tell the controller unless prohibited from doing so.

6. Retention

Enquiry information is kept while the conversation is live and for a reasonable period afterwards. Clinical information on the platform is retained for as long as the controller's account is active, or as their retention obligations require, and is deleted or returned on termination in accordance with the applicable agreement.

7. Security

Data is encrypted in transit and at rest, access is role-based, and access to patient records is logged. Full detail is on the security and compliance page.

8. Your rights

Depending on where you are, you may have the right to access, correct, delete, restrict or object to processing of your personal information, to portability, and to complain to a supervisory authority. For information held on this website, contact us and we will act on it. For clinical information held on the platform, contact the provider or organisation that holds your clinical relationship — they are the controller, and we will support them in responding.

9. International transfers

eMazeLabs Ltd. is based in Israel and the platform is used by providers in several countries. Where personal information is transferred internationally we use appropriate safeguards. Tell us your data residency requirement and we will confirm in writing what we can meet.

10. Changes

If we make a material change to this policy we will update the date above and, where the change affects customers, notify them directly.