Privacy
What HealthScope holds about you, and why
This page explains what HealthScope collects, why it is needed, where it is processed, and how to contact us about your data.
What is collected
- Your email address, to identify your account and sign you in.
- Your profession and specialty, and any interests you choose to add. These are used to decide which updates are relevant to you.
- Technical records needed to operate the service securely: request times and coarse rate-limiting counters.
HealthScope does not collect patient data. Do not enter patient-identifiable information anywhere in the service.
Your password
HealthScope never stores your password. Authentication is delegated to Supabase Auth, which stores only a cryptographic hash. When you register, a one-way partial hash of your password is checked against a public breach index using k-anonymity — the full password is never transmitted. If that service is unavailable, registration proceeds on length and complexity rules alone.
Where your data is processed
HealthScope is hosted on Vercel and stores data in Supabase. Both operate outside Saudi Arabia, so using HealthScope involves a cross-border transfer of personal data. Using HealthScope means this data may be processed outside Saudi Arabia by those service providers. HealthScope limits personal data to what is needed to run the service.
If controlled synthesis is enabled, event and evidence text — never your identity, email, profession or specialty — may be sent to a model provider to produce summaries.
How long it is kept
Your account and profile are kept while your account exists. Delete your account and they are removed. Operational security records are short-lived and are not used to build a profile of you.
Your rights
Under the Saudi Personal Data Protection Law you may ask to see the data held about you, have it corrected, have it deleted, and withdraw consent. You can ask to access, correct, or delete your account data. You can also turn off email delivery without closing your account.
To make any of these requests, contact the address below. You also have the right to complain to the Saudi Data & AI Authority (SDAIA).
Sharing
HealthScope does not sell personal data and does not share it for advertising. Data is shared only with the hosting and authentication providers named above, as processors acting on instruction.
Contact
Privacy requests and questions: privacy@healthscopebrief.app