Privacy
What HealthScope holds about you, and why
HealthScope is used by healthcare professionals in Saudi Arabia and elsewhere. This page states plainly what is collected, where it is processed, and what you can ask for.
What is collected
- Your email address, to identify your account and sign you in.
- Your profession and specialty, and any interests you choose to add. These determine which intelligence reaches you and nothing else.
- Technical records needed to operate the service securely: request times and coarse rate-limiting counters.
HealthScope does not collect patient data. Do not enter patient-identifiable information anywhere in the service.
Your password
HealthScope never stores your password. Authentication is delegated to Supabase Auth, which stores only a cryptographic hash. When you register, a one-way partial hash of your password is checked against a public breach index using k-anonymity — the full password is never transmitted. If that service is unavailable, registration proceeds on length and complexity rules alone.
Where your data is processed
HealthScope is hosted on Vercel and stores data in Supabase. Both operate outside Saudi Arabia, so using HealthScope involves a cross-border transfer of personal data. Under the Saudi Personal Data Protection Law, that transfer takes place on the basis of your consent, given when you create an account, and is limited to the data listed above.
If controlled synthesis is enabled, event and evidence text — never your identity, email, profession or specialty — may be sent to a model provider to produce summaries.
How long it is kept
Your account and profile are kept while your account exists. Delete your account and they are removed. Operational security records are short-lived and are not used to build a profile of you.
Your rights
Under the Saudi Personal Data Protection Law you may ask to see the data held about you, have it corrected, have it deleted, and withdraw consent. Withdrawing consent means closing your account, since the service cannot match intelligence to you without a profession and specialty.
To make any of these requests, contact the address below. You also have the right to complain to the Saudi Data & AI Authority (SDAIA).
Sharing
HealthScope does not sell personal data and does not share it for advertising. Data is shared only with the hosting and authentication providers named above, as processors acting on instruction.
Contact
Privacy requests and questions: privacy@healthscope.app