Trust
Privacy and data handling
What we collect
A referral stores the resources needed, urgency, an approximate pickup location and an optional short description. We do not ask for names, ID numbers or contact details to search or send a referral.
Who sees what
Anyone with a reference number sees status and timing only. The receiving hospital sees the structured summary and description. Every time staff open a description it is written to the audit log.
Retention
Free-text descriptions are deleted 30 days after the referral closes. Aggregates used for analytics keep no personal data.
Accounts
Passwords are hashed with scrypt, sessions are stored hashed, and accounts lock after repeated failed sign-ins. Hospital accounts are verified by an administrator before they appear to patients.
Data accuracy
Every capacity figure shows when it was last updated. Large unexplained changes are flagged for administrator review.
Estimates
Travel times use a routing service when configured. Otherwise they are labelled Estimated: straight-line distance × 1.35 for road winding, divided by 32 km/h (45 km/h for critical cases), plus 2 minutes. AI summaries are labelled as AI or rule-based, and never replace clinical judgement.