Privacy
Malecare has two separate features with different privacy rules. This page describes both.
1. Education-report service
No account. Malecare does not create a patient account, password, or dashboard. You do not log in to receive your report.
Ephemeral raw input. Your questionnaire answers and the free-text note you write are held in your browser's memory and on the server only long enough to generate the report. After the report is generated, the raw text is discarded.
What we store. A structured patient profile summarising your confirmed answers, the report we generated for you, and an encrypted copy of the email address the report was sent to. We do not store names, addresses, phone numbers, dates of birth, or medical record numbers.
PII scrubbing. Before your note is sent to the language model, non-LLM filters redact anything resembling names, phone numbers, emails, addresses, and record numbers.
Emergencies. If your answers indicate a possible medical emergency, we stop the report flow and show a 911 / 988 notice. We do not contact emergency services on your behalf.
Administrator access. Malecare administrators can read stored reports and profiles for clinical sign-off, delivery, and quality review. All administrator access is audit-logged.
Deletion. To have your stored report and profile deleted, contact privacy@malecare.org with the email address you used.
No advertising trackers on the patient flow. No session replay, third-party analytics, or advertising pixels.