Omedso
Clear privacy for a health community
Effective August 24, 2026. This explains what Omedso processes, what becomes public, and how to exercise your rights.
Information for the Omedso community. It is not a medical consultation, an emergency channel, or individual legal advice.
Data controller
OMEDSO S.A.S., tax ID 1391936412001, domiciled in Portoviejo, Manabí, Ecuador, operates Omedso. For privacy requests and rights, email omedso@aevumcast.com.
Data Omedso receives
Omedso receives from Omedso ID the identifier needed to link your account and stores your public name, username, bio, avatar, chosen interests, social relationships, communities, posts, comments, supports, private saves, notifications, requests and private text messages, reports, and technical security metadata. It does not request medical records, diagnoses, prescriptions, appointments, or medical documents.
Purposes and legal bases
We process data to create and protect your profile, display the feed, manage communities, address reports, prevent abuse, and meet legal duties. Depending on the activity, the basis is consent, performance of the requested service, a legal duty, or a documented legitimate security interest, with a right to object where applicable.
What may be public
Personal posts require sign-in. Only accepted friends can see them unless you choose the signed-in community and maintain the required paid access and verification. Joining a community does not widen this audience. Blocks and revocations remove access. Public professional profiles depend on consent and verification. Saved posts and global identity remain private.
Recipients and providers
Omedso uses infrastructure, authentication, and security providers under contract and limited access. A valid legal request may require disclosure to an authority. When a processor operates outside Ecuador, the relationship and safeguards are documented under the LOPDP and applicable rules.
AI and automated decisions
Omedso does not use clinical data to rank the feed or make automated clinical decisions. Moderation may use technical signals to prioritise review, but a consequential restriction keeps a reason, explanation path and human second review. Identifiable content is not used to train general models without separate, revocable consent.
Retention
Profiles, posts, comments, interactions and messages are retained while the account or conversation remains active or they are needed to provide the service. Notifications keep minimal references and do not copy content bodies. A declined request cannot receive new messages. After deletion, a report, a security event, a dispute or a legal duty, Omedso may remove content and retain only the minimum status or evidence for the applicable period. Data is then deleted, anonymized or blocked.
Your rights
You may request information, access, correction, updating, deletion, objection, suspension, portability, or withdraw consent by contacting us. You may also complain to Ecuador's Personal Data Protection Superintendency. Omedso makes no automated clinical decisions.
Age and representation
Access to the Omedso community does not request a declaration of adulthood. Signing in does not verify a person’s age. Permissions to share information and receive communications are managed separately.
Analytics and communications
First-party analytics follows consent and must not receive post or message bodies, global identity or clinical data. Operational communications remain separate from optional marketing, which can be withdrawn without losing the main service.
Security and sensitive content
We use separate sessions, access controls, CSRF protection, rate limits, and operational logs without post bodies, message bodies, or credentials. Messages do not promise end-to-end encryption. Do not share clinical data or another person's documents. No system can promise zero risk; report any privacy exposure immediately.