Privacy Policy
Effective: 2026-05-23 · v0.5
No patient information collected
This tool does not collect, store, or process any patient-identifying information (PHI/PII). All feedback submissions are anonymous; the backend automatically strips detected email, phone, SSN, and medical record number (MRN) patterns before persistence.
Optional follow-up email
The feedback form has an optional email field. It is stored only if you explicitly check "I would like a follow-up," and is kept in a separate column from the comment text. You may request deletion via the contact channel at any time.
Analytics & Tracking
This tool uses no third-party analytics, advertising, social trackers, pixels, cookie-consent banners, or fingerprinting. Cloudflare edge-server access logs (IP, UA, URL) are retained on Cloudflare’s default 30-day rolling window.
AI inference log
The AI explain endpoint logs the SHA256 hash of each query, the retrieved paper-chunk IDs, model temperature, token count, and safety-filter verdict. Raw query text is not persisted. This log supports safety auditing only and is not used for user profiling.
GDPR / CCPA
Because no PII is collected, "right to delete" requests under EU GDPR and California CCPA are automatically satisfied (no data to delete).