Privacy Policy

Account data you provide at registration: full name, email address, occupation, institution type and name, and area of interest. Your password is stored only as a salted one-way hash.

Usage data generated while you use the service: the questions you ask, the answers and citations returned, calculator inputs and results, feedback you submit, and technical logs (IP address, browser type, timestamps) needed to operate and secure the service.

Verification codes sent to your email during registration and password reset, which expire after a short period and are stored hashed.

ClinicaGuide is a decision-support tool for healthcare professionals. Do not enter patient-identifying information(names, identity card or passport numbers, contact details, medical record numbers). Clinical details you type to obtain guidance are processed to generate an answer and retained in your conversation history so you can revisit them; you can delete any conversation at any time from the sidebar.

• To create and secure your account and verify that you are a healthcare professional or student.
• To provide the service: retrieve guideline and literature evidence, generate answers, run calculators and keep your history.
• To improve answer quality, for example by reviewing feedback and aggregated, de-identified usage patterns.
• To communicate with you about your account, security and service changes.
• To meet legal obligations and to protect the service against abuse.

We do not sell personal data and we do not use it for third-party advertising.

To generate answers, the text of your question and the retrieved evidence are processed by Google's Gemini models through the Google AI API, and literature searches are sent to the United States National Library of Medicine (PubMed) and the U.S. FDA openFDA service. Verification and notification emails are delivered through Mailgun. Our servers and databases are hosted on Google Cloud in the Singapore region. These providers process data on our instructions under their published terms and security commitments; where data leaves Malaysia it is for these purposes only.

Account data is kept while your account is active. Conversation history is kept until you delete it or your account is closed. Technical logs are rotated automatically and kept for a limited period for security and troubleshooting. Backups are retained for up to 14 days.

Data is encrypted in transit (TLS), access to production systems is restricted to authorised staff, passwords are hashed, and the service is monitored for availability and abuse. No system is perfectly secure; please use a strong, unique password and do not share your account.

Under the PDPA you may request access to or correction of your personal data, withdraw consent for processing that is not required to provide the service, and ask us to delete your account. Write to hello@scancer.ai from your registered email address; we respond within 21 days.

We may update this policy as the service evolves. Material changes will be announced in the application; the date at the top shows the current version.