Privacy notice.
Version 2026-10-26-v3 · Updated October 26, 2026
Operator details and legal review are still being finalized. Use fictional product and contact details during testing. This notice does not certify GDPR compliance.
Who is responsible
The controller is Kareem Altal. Country: United States. Contact address: pending.
Privacy contact: Planned: info@deviceornot.com (not active yet). Use the in-app privacy request form during restricted testing. A working inbox is required before public use.
Open your privacy controls to access, correct, export or delete records linked to your browser, withdraw optional consent, restrict processing, or make a request.
What we collect and why
| Information | Purpose and choice |
|---|---|
| Questionnaire and classification answers, software function names, educational results and rules version | Provide the check you request and let you review its reasoning. Contact details are optional. |
| Opaque session identifier and security controls | Keep your checks private, prevent abuse and enable your data controls. Application session cookies expire after seven days. |
| Name, email, company and role, if you choose to share them | Optional, separately consented contact storage for your check and replies you request. Withdrawing this consent removes these fields. |
| First-party usage events | Optional, separately consented analytics. Off by default. You can withdraw consent and delete linked events. |
| Review questions, contact consent and privacy requests | Handle requests you submit and record the operator’s response. Do not include patient data, confidential information or identity documents. |
| Optional AI product text or pasted marketing copy | Only if AI and its processor review are enabled, and you explicitly opt in for the tool. Raw AI text is not retained by this application. |
Lawful basis and consent
The operator must document and approve the lawful basis for necessary service, security and rights-request processing before public launch. This restricted testing release does not claim that this assessment is complete. Optional contact storage and usage analytics require separate, unchecked consent choices. The privacy-notice acknowledgement is not consent for marketing or unnecessary contact collection. You can use the check without sharing contact details or accepting optional analytics.
Consent may be withdrawn in Privacy controls. Withdrawal does not make earlier processing unlawful. Complete deletion is available separately. No marketing subscriptions are sent by this release; enabling an optional provider requires a documented processor review first.
Storage, recipients and international transfers
The current staging app and Firestore database run in us-central1, United States. Google Cloud supplies hosting, database, security and identity services. Google sign-in protects staging, and Google processes the sign-in email and associated security information. Only the approved staging account can enter. App deletion does not delete your Google account or Google-managed login cookies.
For EU/UK users, US hosting involves an international-transfer assessment. The operator must confirm appropriate transfer safeguards, Google’s data processing terms and any relevant supplementary measures before public use. EU hosting is not claimed, and choosing a region alone would not establish compliance.
AI uses Google Vertex AI only if enabled after review and explicit opt-in. Names, emails and company fields from the contact record are excluded from model requests; do not put personal details in free text. Resend sends the operator a generic notification when a signup/check is saved. These operational alerts contain an admin-dashboard link, without the visitor’s contact details or questionnaire answers. Visitor result emails remain unavailable pending privacy review; marketing through Kit remains off. A provider may retain its own delivery/security records under its terms; the operator must coordinate rights requests with any enabled provider.
How long records remain
- Application contact profiles, checks, classification assessments, reviews, consent history, optional events and AI audit metadata: normally 30 days from the browser profile’s creation. New checks do not reset this deadline.
- When you submit a privacy request, linked records are held for up to 90 days so the request can be reviewed. Export and deletion remain available. A restriction or objection stops new checks and optional processing.
- Authentication sessions: seven days; admin sessions: eight hours. Recovery-code records expire with their associated profile.
- Browser progress: session storage for the current tab, removed on completion/deletion or when the app next loads it after 24 hours. Closing the tab normally clears it. No contact details or raw AI intake text are saved in browser storage.
- Expired application records are hidden immediately by the app. Firestore’s automatic physical deletion is asynchronous and can lag; it is not promised to be instantaneous.
- Google Cloud logs are separate: the standard log bucket normally retains entries for 30 days; required security/admin audit logs are retained for 400 days under Google’s configuration. Provider recovery copies, infrastructure logs and any separately configured backups follow their own retention and contractual controls.
Your choices and rights
Depending on the applicable law and circumstances, you may request access, correction, erasure, restriction, objection and portability, and withdraw consent where processing relies on it. You may complain to your competent data protection authority, including the authority where you live or work in the EU, or the ICO for applicable UK matters. These rights can be subject to lawful exceptions; the operator must assess and explain its response.
Self-service export, correction, consent withdrawal and deletion are available in Privacy controls. The request form records other rights requests in the admin queue, with a normal one-calendar-month response deadline; recording a request does not mean it has been fulfilled. Any permitted extension must be communicated and justified. Without contact details, return using the same browser or a saved recovery code to view the response.
To prevent someone obtaining another person’s records, we require the linked session or a private recovery code for self-service access. If both are lost, contact the published privacy contact for proportionate identity verification. We do not request patient records or identity documents through these forms.
Cookies, local storage and security
The app uses strictly functional session/admin cookies and tab storage for the requested check. Optional Google Analytics (property G-RSG8BJT8HW) loads only after separate opt-in through Analytics preferences. It measures visits to the home, about, FAQ and legal pages using cookies and device/network information processed by Google. It is excluded from the questionnaire, results, admin, deletion and privacy-management pages. We do not send questionnaire answers, contact details or record identifiers to Google Analytics. Page locations exclude query strings and fragments. Advertising consent and Google signals are disabled. Analytics cookies and your browser preference last up to 180 days; use Analytics preferences to reject or withdraw and clear these cookies. This browser choice is separate from optional first-party events linked to your check and is not included in application exports or deletion. Google Analytics data is managed separately in the Analytics property; contact us about requests concerning that data. See how Google uses information from partner sites. Optional first-party events require their own opt-in. Google’s identity gateway has its own authentication cookies. Cookies for application access are HttpOnly, use SameSite restrictions, and are Secure on the hosted site. Passwords, recovery codes and authentication tokens are excluded from data exports and normal admin lists.
Automated output and sensitive data
The educational estimate is produced only by deterministic, versioned rules and a visible decision path. The optional classification follow-up uses separate draft rules and public FDA product-code references. Only the code is sent to FDA, without contact details or answers. AI never decides either outcome. It is not an official regulatory determination or a decision about an individual’s legal rights, healthcare or eligibility. All qualification rules are approved only for restricted manual testing; regulatory validation remains pending, and classification rules remain DRAFT. Do not enter patient information, special-category personal data, confidential information or trade secrets. This tool is designed for adult professional users.
Changes to this notice
Material changes require an updated version and appropriate user information. New optional purposes require a fresh, specific choice; an old acknowledgement does not authorize them.