Privacy Policy

Last updated: 20 September 2026

This Privacy Policy explains how Preeclampsia CDSS ("we", "us", the "Service") collects, uses, protects, and shares information in connection with the Preeclampsia CDSS web application and mobile apps for iOS and Android.

Preeclampsia CDSS is a clinical decision-support tool for authorized healthcare professionals. It does not provide a medical diagnosis and is not a substitute for professional clinical judgement.

1. Who uses the Service

The Service is intended for authorized clinical staff only. User accounts are created by your organization's administrator; there is no public self-registration. Clinicians use the Service to record maternal risk factors and laboratory values and to obtain a preeclampsia risk estimate for their patients.

2. Information we process

a. Clinician account data

Username, display name, role (clinician/administrator), and a securely hashed password. We never store passwords in plain text.

b. Clinical / research data (entered by clinicians)

De-identified maternal and clinical inputs such as age, BMI, blood pressure, proteinuria, laboratory results, gestational age, risk factors, model outputs (risk probability, scoring, alerts), clinician decisions, and confirmed outcomes.

c. Patient identifiers

Where a clinician records a patient's name, national ID, or hospital number, these identifiers are stored in a separate, access-controlled identity vault and are never used as inputs to the risk models and never included in any data export.

d. Technical & audit data

Session information needed to keep you signed in, and audit logs of prediction runs and administrative actions for security and accountability.

3. How we use information

To provide the core function: calculating and displaying preeclampsia risk estimates and clinical guidance.
To maintain a patient's assessment history and outcome follow-up.
To authenticate users and secure the Service.
To improve and re-calibrate the risk models using de-identified, clinician-confirmed outcomes.

We do not sell personal information, and we do not use it for advertising.

4. Legal basis & health data

The Service processes health-related information on behalf of the healthcare organization operating it, for the provision of healthcare and for the organization's legitimate clinical and quality-improvement interests, subject to the organization's own consent and data-processing obligations under applicable law. The operating organization is the data controller for patient data.

5. How information is shared

We share information only with: (a) the operating healthcare organization and its authorized users; (b) infrastructure/hosting providers acting as our processors under confidentiality obligations; and (c) authorities where required by law. We never sell data.

6. Data retention

Clinical and audit records are retained for as long as needed for clinical care, medical-legal, and research-integrity purposes, or as required by the operating organization and applicable law. Account personal data is removed or anonymized following an account-deletion request (see section 9).

7. Security

All traffic is encrypted in transit using HTTPS/TLS.
Passwords are stored only as salted cryptographic hashes.
Role-based access control restricts administrative functions.
Patient identifiers are kept separate from clinical/research data.
Bulk export of the research dataset is disabled to prevent leakage.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete personal data, and to object to or restrict certain processing. To exercise these rights, contact us (section 11) or your organization's administrator.

9. Account & data deletion

You can request deletion of your account and associated personal data at any time — from within the mobile app (More → Privacy & data → Request account deletion) or via our account-deletion page. We act on verified requests promptly; de-identified clinical records required for medical-legal or research integrity may be retained in anonymized form.

10. Children

The Service is a professional tool and is not directed to children. It is not intended for use by anyone under 18 as an end user.

11. Contact

Questions or requests: support@preeclampsia.site.

12. Changes

We may update this policy; material changes will be posted on this page with a revised "Last updated" date.