Privacy notice
Your account stays optional.
This notice describes the Phase 4 account features. Last updated October 8, 2026.
What an optional account stores
Supabase Auth stores your email address, account identifier, verification and session records. HealthSignal Global stores saved reviewed locations, alert preferences, matched dashboard alerts, read state, and bounded mutation counters. It does not ask for diagnoses, medical records, precise device location, or protected health information.
Why it is used
Account data is used only to authenticate you, remember your selected regions, deterministically match verified public observations to your preferences, prevent abuse, and display your private dashboard. No paid AI service receives account or observation data.
Sharing and email
Supabase processes account and database data as the configured platform provider. Authentication email is separate from outbreak-notification delivery. Phase 4 sends no outbreak email and does not sell, advertise with, or broker personal data.
Retention and control
Account and preference data remains until you delete it. Dashboard alerts target 180-day retention. You can download a JSON export or permanently delete your account from the dashboard; deletion removes the Auth user and cascades owned account records. Operational backups may age out on the provider's schedule.
Public map use
The public map does not require an account. The application and infrastructure providers may process ordinary request metadata such as IP address, user agent, time, and requested path for delivery, security, rate limiting, and short-lived logs.
Before public accounts are activated, the operator must publish a private contact channel for privacy, correction, and security requests. Project implementation questions can be reviewed in the public repository without posting personal information.
Return to the public map