How we handle data
Privacy is designed into TowardPCC, not bolted on. This page states plainly what happens to data today; the full legal privacy policy lands before public launch.
The calculators never send your inputs anywhere
Every calculation runs entirely in your browser. The values you type — a weight, a blood gas, a score — are computed on your own device and are never transmitted to us or stored on any server. You can confirm this: the calculators keep working with the network switched off.
No patient data is collected
TowardPCC is not a medical record and does not ask for, receive, or store patient-identifiable information. Please do not enter names, medical record numbers, or other identifiers into any field.
Our servers are in Saudi Arabia
The site is hosted on infrastructure located in Saudi Arabia. Where the platform needs to store anything at all — for example, a pilot request you choose to send us — it stays within that hosting.
We collect the minimum to run the service
We keep data collection to what is genuinely needed to operate the site securely and reliably. Any analytics we use are privacy-respecting and do not build advertising profiles. When forms arrive, they will collect only what a request requires, and we will say so at the point of collection.
What we collect, per feature, and why
This table is the honest, complete picture of what each part of the site collects today. Where a feature collects nothing, we say so.
| Feature | What we collect | Why | Kept for |
|---|---|---|---|
| Calculators | Nothing | They compute in your browser | — |
| Contact / pilot / interest / research forms | Your name, email, and what you wrote; a salted, truncated hash of your IP | To reply, and to limit abuse of the forms | 24 months, then deleted |
| Analytics | Privacy-respecting, cookie-less page counts (no personal profiles) | To understand which tools are used | Aggregated |
| Admin access logs | Actions taken by our operators (an audit trail) | Security and accountability | 12 months |
Where your data lives
TowardPCC is hosted on servers located in Saudi Arabia and operates in alignment with the Saudi Personal Data Protection Law (PDPL). For the upcoming PICU registry, deployments will be configured to comply with the data-protection requirements of each participating Gulf country — including data-residency, consent, and governance requirements — in coordination with each institution.
How we protect it
- Encryption in transit (TLS) and at rest for the database.
- Administrator access requires a password and a second factor (TOTP), with lockout on repeated failures.
- An append-only audit log records administrative actions.
- Automated, encrypted backups with a tested restore procedure.
Who else touches the data
We keep third parties to the minimum. Today the only sub-processors are our hosting provider (in Saudi Arabia) and our email delivery for form replies. We list the real ones here and update this page if that changes; we do not use advertising or profiling third parties.
Access, correction, and deletion
You can ask us what we hold about you, correct it, or have it deleted, at any time — email us and we will act on it. Calculator use leaves nothing to delete.
Email: info@towardpcc.com