Privacy & your information

Public information

Published hospital facts can be browsed and read by search engines and AI assistants. Personal records, private reports and operator booking information are excluded from public APIs and indexing.

Inquiries and accounts

We use your email for sign-in and private service notifications. Your administrative inquiry is encrypted in an overseas database when the production service is configured. Factual replies query public hospital information. Closed inquiries are deleted or anonymized after 12 months.

Reports and patient profiles

Report translation requires a paid order and separate sensitive-data consent. Originals and translations are encrypted in private overseas storage; Anthropic is the configured translation provider. Translation does not interpret clinical findings. Reports are deleted 12 months after last access, with 30-day notice, or when you delete them earlier.

Patient identity details are encrypted and used only for authorized official-channel bookings. Operators must log access to plaintext passport details. Patient profile data is excluded from the public answer engine, notification emails and analytics.

Sharing and overseas processing

Production data processing is disabled until the required legal assessment is recorded. The final operator identity, deployment countries, storage location and provider contract terms will be included before collecting production sensitive data. For booking, we share only necessary details with the selected hospital under the recorded authorization.

Your controls

You can delete reports in your account and request account deletion. Default report notifications contain a login link, not report contents. A separate explicit preference is required before any translation PDF can be attached to an email.