Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to provide the service:

• Email address — collected only if you contact us for support, request an access code, or are issued an access code by us. Used solely to communicate with you about the apps.
• Access code usage data — we track how many times each access code has been used to enforce usage limits and prevent abuse. No personally identifiable information is attached to usage counts.
• Article and document content you submit — URLs, text, and PDF documents you submit for analysis are sent to our server and to third-party AI services for processing. We do not store submitted content after analysis is complete. MedPrism analysis results are retained temporarily (up to 48 hours) to enable full report retrieval, then automatically purged.
• Feedback comments — if you choose to submit feedback through any app, your comment is stored for product improvement purposes. No personal information is required to submit feedback.
• Browser cookies and local storage — we use functional storage to remember your access code between sessions. This data contains no personal information beyond your access code and is not used for tracking or advertising.
• IP-based usage counters — for users without an access code, we maintain a hashed counter to enforce free-use limits. The IP address itself is not retained; only a one-way hash and a count.

2. How We Use Your Information

• To deliver requested communications (such as access codes or support replies)
• To track usage against your access code limit
• To enforce free-use limits for unauthenticated users
• To improve the quality and accuracy of the service

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

Our apps use the following third-party services to operate:

• Anthropic Claude API — content you submit is processed by Anthropic's Claude AI. Anthropic's privacy policy governs their handling of this data. See anthropic.com/privacy.
• Brave Search API (TruthPrism, MedPrism, ScamPrism) — used to verify factual claims and cross-reference external databases. See brave.com/privacy/search.
• NCBI E-utilities / PubMed Central (MedPrism) — used to retrieve full-text research articles from the National Library of Medicine's public database. See nlm.nih.gov/privacy.
• Unpaywall (MedPrism) — used to locate open-access versions of research papers by DOI. See unpaywall.org/legal.
• Google Safe Browsing / VirusTotal / Cisco Umbrella (ScamPrism) — used to assess URLs and links for known threats. Each service's own privacy policy applies.
• CloudMailin / Resend (ScamPrism) — used to receive and send email for analysis. Email content is processed transiently and purged after analysis.
• Railway — our hosting provider. Data is stored on Railway's servers. See railway.app/legal/privacy.
• SendGrid — used to deliver communications by email when applicable. See twilio.com/legal/privacy.

4. Data Retention

• Email addresses — retained until you request deletion.
• Access code records — retained for as long as the code is active. Disabled or deleted codes are removed from our database.
• Submitted content — not retained after analysis is returned to you.
• MedPrism analysis results — retained for up to 48 hours to enable full report retrieval, then automatically purged.
• ScamPrism email content — automatically purged after 48 hours.
• Feedback comments — retained for product improvement; no personal information is attached.
• Cookies and local storage — stored in your browser until you clear them.

5. Your Rights

Depending on your location, you may have the following rights:

To exercise any of these rights, email us at support@pklmedialab.com. We will respond within 30 days.

6. Children's Privacy

Our apps are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

7. Security

We take reasonable measures to protect your information, including encrypted transmission (HTTPS) and restricted access to our database and server infrastructure. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above. Continued use of our apps after changes constitutes acceptance of the updated policy.

9. Contact