Privacy & safety
Privacy by design. The system minimizes data collection at every stage.
Defaults that protect you
- No diagnosis is ever required.
- Uploaded images are processed in memory and not stored.
- Location is off by default.
- Your Access Passport holds preferences, not medical records.
- Nothing is sent or shared without your confirmation.
Safety boundaries
- Medical actions are never automatic.
- Dosages and warnings are shown verbatim and never altered.
- Uncertain, machine-read content is clearly marked for you to verify.
- Content from files/webpages is treated as data, guarding against injection.
Your controls
You can delete any task and its source at any time. You can also erase everything now.
Data we keep, and for how long
| Class | Example | Default retention |
|---|---|---|
| Ephemeral input | Uploaded image | Deleted after processing |
| User preference | Text scale, contrast | Until you change or delete it |
| Task state | Which step you're on | Until completion or deletion |
| Audit event | “A task was created” | Minimal metadata, no content |
| Aggregate evidence | Category-level rates | De-identified, no raw records |