Website & Doctor-Portal Privacy Notice

Last updated: 2026-08-13 · Applies to: this website and its doctor portal (the SALUNOTE app has its own policy — it collects nothing; see the app privacy policy).

Who we are

The Hyrcan Bio Data Team operates this website. Swiss data-protection law (FADP) and, where applicable, the GDPR govern the data described here. Questions and requests: contact@salunote.ch.

What this website processes, and why

Doctor registrations. Name, email, phone (optional), specialty, medical license number and country, workplace (optional), preferred language. In this phase the doctor portal is not yet in service: a registration records your interest in working with us, and nothing more. The licence details are asked for now so that your account can be verified when the portal opens, without coming back to you for them a second time. Kept while your registration stands; rejected or withdrawn registrations are deleted after 12 months.

Portal and admin accounts. Email, a password hash (argon2id — we cannot see your password), optional two-factor secret, and session records. Kept while the account exists.

Patient-shared reports — not in this phase. The SALUNOTE app runs entirely on the user's device and sends us nothing. Patient-to-doctor report sharing is a Phase 2 feature: the routes that would receive it are switched off in this deployment, and no patient document of any kind is stored on this site today. This notice will be updated before that changes.

App sign-up verification — not in this phase. The Phase 1 app has no account and no sign-up, so no verification codes are issued or processed. Also Phase 2.

Feedback. Your message, its category, optional app version/platform, and — only if you choose to give it — an email address for a reply. Used for nothing else.

Audit log. Security-relevant events (sign-ins, approvals, uploads) are recorded with pseudonymous identifiers — the audit log is designed to contain no names or email addresses.

Cookies

One strictly necessary session cookie for signed-in portal/admin users. No analytics cookies, no advertising, no tracking, no third-party requests — every asset on this site is served by us.

Your rights

You can request access to, correction of, or deletion of your data (FADP / GDPR rights) at the contact address above. Doctors can delete individual reports directly in the portal; deleting an account removes its data unless a legal obligation requires longer retention.

Changes

Material changes to this notice are published here before they take effect.