Data protection policy
Safeguarding your personal health records.
Device-only records
Guest personal records are encrypted on your device and protected by a six-digit PIN. The unlock key is kept in memory, not persistent browser storage. If you forget your PIN, these local records cannot be recovered.
Account records and access
Account records are stored through authenticated access controls that restrict personal records to their owner. Adult registration and consent are required before saving personal data. Do not share your account credentials or PIN.
Locking and privacy
Device-only storage locks after five minutes in the background. Five incorrect PIN attempts trigger a 30-second wait. Quick exit clears the in-memory unlock key; it does not erase browser history or previously downloaded files.
Your controls
Use the privacy controls in your profile to export or delete your records. Downloads are outside the protected app storage, so keep them secure. Referrals remain unavailable until a consent-based sharing process is ready.
Questions about this policy
If a question about how your records are protected is not answered here, contact the team.