Legal
How we handle data
Privacy is designed into TowardPCC, not bolted on. This page states plainly what happens to data today; the full legal privacy policy lands before public launch.
The calculators never send your inputs anywhere
Every calculation runs entirely in your browser. The values you type (a weight, a blood gas, a score) are computed on your own device and are never transmitted to us or stored on any server. You can confirm this: the calculators keep working with the network switched off.
No patient data is collected
TowardPCC is not a medical record and does not ask for, receive, or store patient-identifiable information. Please do not enter names, medical record numbers, or other identifiers into any field.
Our servers are in Saudi Arabia
The site is hosted on infrastructure located in Saudi Arabia, and anything the platform stores (for example a pilot request you choose to send us) is held within that hosting. Requests now reach those servers directly, through a load balancer in the same Saudi region. They used to pass through a global content-delivery network first, and that step is gone. Email is the part that still travels. A message you send to the address on this page, and the short internal notification telling us it arrived, are both carried by a mail provider whose servers are outside the Kingdom. That notification names the kind of enquiry and a link for us to open — not your name, your address, or anything you wrote. We would rather say plainly that this one path leaves than round it off. The calculators are unaffected by any of it: what you type into them never leaves your browser at all, so there is nothing to route anywhere.
We collect the minimum to run the service
We keep data collection to what is genuinely needed to operate the site securely and reliably. We run no analytics: no page counts, no visitor profiles, and no advertising or tracking third parties. The forms collect only what a request requires, and each one says so where you fill it in.
What we collect, per feature, and why
This table is the honest, complete picture of what each part of the site collects today. Where a feature collects nothing, we say so.
| Feature | What we collect | Why | Kept for |
|---|---|---|---|
| Calculators | Nothing | They compute in your browser | — |
| Preferences saved in your browser | Which calculators you favorited, and whether you dismissed the install prompt | So the site remembers them on this device | Until you clear this browser's data |
| Contact / pilot / interest / research forms | Your name, email, and what you wrote; a salted, truncated hash of your IP | To reply, and to limit abuse of the forms | 24 months, then deleted |
| Admin access logs | Actions taken by our operators (an audit trail) | Security and accountability | 12 months |
Where your data lives
TowardPCC is hosted on servers located in Saudi Arabia and operates in alignment with the Saudi Personal Data Protection Law (PDPL). For the upcoming PICU registry, deployments will be configured to comply with the data-protection requirements of each participating Gulf country (including data-residency, consent, and governance requirements) in coordination with each institution.
How we protect it
- Traffic to the site is encrypted with TLS, and the storage holding the database and its backups is encrypted at rest.
- Administrator access requires a password and a second factor (TOTP), with lockout on repeated failures.
- An append-only audit log records administrative actions.
- Automated, encrypted backups with a tested restore procedure.
Who else touches the data
We keep third parties to the minimum. Today they are three: Oracle Cloud Infrastructure, our hosting provider, in Saudi Arabia; Cloudflare, which answers the DNS lookups that point this domain at those servers, and which no longer carries or inspects the requests themselves; and a mail provider whose servers are outside the Kingdom, which carries both the email you send to the address on this page and the internal notification telling us that something arrived. That notification names the kind of enquiry and nothing about the person who sent it. We list the real ones here and update this page if that changes; we do not use advertising or profiling third parties.
Access, correction, and deletion
You can ask us what we hold about you, correct it, or have it deleted, at any time. Email us and we will act on it. Calculator use leaves nothing to delete.
Email: info@towardpicu.com