Legal
Privacy Policy
Privacy Policy
Last updated: October 21, 2026
This Privacy Policy explains how SmartAlpha Inc. and its affiliates ("SmartAlpha", "we", "us" or "our") collect, use, share and protect personal information when you visit smartalpha.ai and its pages, including SonoFive and the eIFU portal (together, the "Website").
SmartAlpha is based in the United States. We also respect the privacy laws of the countries where our visitors live, including the European Union General Data Protection Regulation ("GDPR"), the UK GDPR, the Swiss Federal Act on Data Protection and the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK"). Where those laws give you stronger rights, we apply them to you.
This policy covers the Website only. Data processed by our medical device software (such as Nerveblox and MSK Go) on ultrasound systems is governed by our agreements with healthcare providers and device manufacturers, not by this policy.
1. Who is responsible for your information
SmartAlpha Inc. is the primary data controller for the Website, together with its affiliates.
SmartAlpha Inc. 101 Arch Street, 8th Floor, Office No. 841 Boston, MA 02110, United States Email: contact@smartalpha.ai
For data subjects in Türkiye, our affiliate in Ankara acts as data controller under KVKK and can be reached at ODTÜ Teknokent 17-1 No.109, 06800 Ankara, Türkiye, or at contact@smartalpha.ai.
We have not appointed a Data Protection Officer. Our privacy team handles all privacy questions and requests at contact@smartalpha.ai.
2. Information we collect and why
We collect only the information we need for the purposes below. We do not sell your personal information, and we do not use it for targeted advertising.
Visiting the Website
- Technical data: when you load a page, our hosting provider automatically processes technical data such as your IP address, browser type, device type and the pages requested. This is needed to deliver the Website and keep it secure.
- Analytics: we use Cloudflare Web Analytics to understand how the Website is used (for example, page views, referring websites, country and device type). It does not use cookies or track you across websites, and we do not receive your IP address from it.
Contacting us
- When you use the contact form, we collect your name, email address, phone number (optional), subject and message, and use them to answer your sales inquiry or support request.
- If you tick the consent box on the form, we may share your inquiry and contact details with the ultrasound manufacturer or authorized reseller partner best placed to respond to you (see section 4). If you do not tick the box, we still use your details to respond to your inquiry directly; we simply do not share them with our partners.
- If you email us directly, we use your email and its content in the same way.
SonoFive
- SonoFive, our daily sonoanatomy exercise, stores an anonymous random identifier and your game progress in your browser's local storage so the game can remember your results.
- To understand how the game is used, we record game events linked to that anonymous identifier: the date, your browser's time zone, the website that referred you, and your scores. We do not record your name, email address or IP address with these events.
- If you choose to join the SonoFive collaboration list, we collect your email address together with your score and the date, and use them to contact you about collaboration with SmartAlpha. You can ask to be removed at any time.
eIFU portal
- When you look up electronic instructions for use, the device identifier (UDI) you enter is sent to our lookup service to find the right manuals. We do not ask for or store personal information in this process.
Embedded content and links
- Some pages include videos embedded from YouTube in privacy-enhanced mode. YouTube may set cookies or collect data only when you play a video.
- The SonoFive page loads fonts from Google Fonts, which means your browser connects to Google's servers.
- Links to LinkedIn, Facebook, Instagram, X and other websites take you to services governed by their own privacy policies.
Health information
The Website is not intended for patient information. Please do not send us patient data or other health information about identifiable individuals through the contact form or by email.
3. Legal bases for processing (EEA, UK and Switzerland)
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
- Answering your inquiry: taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
- Sharing your inquiry with our partners: your consent.
- Website delivery, security and anonymous analytics: our legitimate interest in operating a secure and useful website.
- SonoFive game statistics: our legitimate interest in understanding and improving the game, using anonymous identifiers only.
- SonoFive collaboration list: your consent.
- Legal obligations: where we must keep or disclose information by law.
Where we rely on legitimate interests, you have the right to object (see section 8).
For visitors in Türkiye, we process personal data in line with KVKK. Sharing your inquiry with our partners, including transfers outside Türkiye, is based on your explicit consent under KVKK, which you give by ticking the consent box on the contact form.
4. How we share information
Ultrasound manufacturer and reseller partners. Our products are sold and supported together with ultrasound manufacturers and authorized resellers. If you give your consent on the contact form, we may share your inquiry and contact details with the partner best placed to respond to you, for example the partner serving your region or the manufacturer of your ultrasound system. These partners may be located outside your country and use your information to respond to you, in line with their own privacy policies.
Service providers. We use the following providers, who process information on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Google (Firebase Hosting, Cloud Firestore, Google Cloud Run) | Website hosting, SonoFive data storage, eIFU lookup | United States and European Union |
| Cloudflare | Website analytics | United States and global network |
| FormSubmit (formsubmit.co) | Delivering contact form and SonoFive collaboration list messages to our inbox | United States |
| Google Fonts | Fonts on the SonoFive page | United States |
| YouTube (Google) | Embedded videos | United States |
Other cases. We may disclose information if required by law or to protect our rights, users or the public, and as part of a merger, acquisition or sale of assets, in which case the recipient will be bound by this policy or an equally protective one.
We do not sell personal information and do not share it for cross-context behavioral advertising.
5. International transfers
SmartAlpha is based in the United States, and our affiliates and service providers may process information in other countries. When we transfer personal information out of the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where the recipient is certified. When we transfer personal information out of Türkiye, we rely on standard contracts approved by the Turkish Personal Data Protection Board, your explicit consent where the law allows it, or other mechanisms permitted under Article 9 of KVKK.
6. Cookies and similar technologies
The Website does not use advertising or tracking cookies, and our analytics are cookie-free, so we do not show a cookie banner. SonoFive uses your browser's local storage only to remember your game progress and anonymous identifier; you can clear it at any time in your browser settings. Embedded YouTube videos may set cookies when you play them.
7. How long we keep information
- Contact form messages and emails: for as long as needed to handle your request and any business relationship that follows from it, then deleted.
- SonoFive game statistics: kept in anonymous form to understand and improve the game.
- SonoFive collaboration list: until you ask to be removed.
- Technical and analytics data: for the limited periods set by our hosting and analytics providers.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct inaccurate information;
- have your information deleted;
- restrict or object to our processing, including processing based on legitimate interests;
- receive your information in a portable format;
- withdraw your consent at any time, without affecting processing before the withdrawal;
- not be discriminated against for exercising your rights.
EEA, UK and Switzerland: you can also lodge a complaint with the data protection authority in the country where you live or work.
Türkiye: you have the rights listed in Article 11 of KVKK, including learning whether your data is processed, requesting correction or deletion, learning the third parties it was transferred to, and objecting to outcomes that arise solely from automated processing. You can also apply to the Turkish Personal Data Protection Board (KVKK Kurumu).
United States: residents of California and other states with privacy laws have the right to know, access, correct and delete their personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined in these laws.
To exercise any of these rights, email contact@smartalpha.ai. If you shared an inquiry with our partners and ask us to delete it, we will also ask those partners to delete your information. We may need to verify your identity before acting on a request.
9. Children
The Website is intended for healthcare professionals and businesses. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Security
We use appropriate technical and organizational measures to protect personal information, including encrypted connections (HTTPS) and access controls at our service providers. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.
11. Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, highlight them on the Website.
12. Contact us
If you have questions about this policy or how we handle your personal information, contact us at contact@smartalpha.ai or write to SmartAlpha Inc., 101 Arch Street, 8th Floor, Office No. 841, Boston, MA 02110, United States.