Privacy policy

Draft for legal review before launch (Data Privacy Act of 2012, RA 10173).

What we collect

• Account data: name, email, hashed password.
• Clinic submissions: claims, profile proposals, physician credentials, device records and evidence documents.
• Correction and dispute reports, including reporter contact details.
• Basic security logs (IP address for rate limiting, audit trail of actions).

Private evidence

Uploaded evidence, device serial numbers, invoices and service documents are stored privately and are accessible only to the uploader and authorised DermFinder PH reviewers. They are never published.

Confidential reports

Identities of people who submit corrections, disputes or device concerns are kept confidential and are not disclosed to the clinic concerned without consent, except where required by law.

Your rights

You may request access, correction or deletion of your personal data through the corrections page.