Privacy Policy

The one rule that shapes everything

Curbside Consults is built for de-identified clinical cases only. You attest before your first consult that your inputs contain no patient identifiers, an automatic masking pass catches slips (names, phone numbers, addresses, ID numbers) and shows you exactly what will be sent, and our AI provider only ever receives that masked text. Do not enter information that identifies a patient.

What we collect

• Account: your email address, optional name, and — for password accounts — a salted hash of your password (never the password itself). Signing in with Google shares your email and name from Google; we store no Google credentials.
• Consults: the de-identified case text you submit and the responses generated, kept as your consult history until you delete them or your account.
• Credits and billing: your credit balance and a ledger of grants and spends. Payments are processed by Stripe; your card details go to Stripe directly and never touch our servers. We store only Stripe's identifiers for your customer and subscription.
• Usage: daily consult counts and processing volume, used for fair-use limits and abuse prevention (with your IP address for rate limiting).

We run no advertising trackers and no third-party analytics, and we do not sell or share personal information for advertising.

Where processing happens

Your account and consult history live on our servers in Canada (Montreal region). To generate a consult, the masked case text is processed by our AI provider (Alibaba Cloud Model Studio, Singapore region) — this is precisely why patient identifiers must never be entered. Stripe processes payments under its own privacy policy.

Deleting your data

You can delete individual consults at any time, and you can delete your entire account from Settings → Danger zone — in the web app and inside the mobile apps. Account deletion is immediate and irreversible: your consult history, credit balance and profile are erased, and any active subscription is cancelled at once. Records of past payments remain with Stripe as required for financial record-keeping.

Cookies

We use a single session cookie to keep you signed in. There are no advertising or cross-site tracking cookies.

Contact

Privacy questions or requests: [email protected].