Privacy notice

Your vault’s contents are zero-knowledge to PDI Med: encrypted in your browser under a key we never receive. Outside the vault we keep only what the app needs, protect it as health information, and never sell it. The full picture — including exactly what we can read — is on our Security page, which is part of our Interim Beta Terms.

Account. Your email, sign-in and device records, and the security settings that protect your account.

Professional details you enter. Such as your specialty, residency, board-exam dates and practice locations.

Your vault. Stored encrypted; we cannot read it.

Case-log data. De-identified details from each encounter and the date of service, linked to a patient code only your vault can resolve.

Activity. When you sign in, save, commit and export.

Messages you send us. Please do not include patient information in support messages or website forms.

To run your case lists and the app, to secure your account, and to answer you. We do not use it for anything else.

Amazon Web Services. Hosting, storage, email delivery, and AI inference through Amazon Bedrock, in the United States, under our Business Associate Agreement with Amazon. Anthropic, which makes the Claude model, does not receive your data.

This website. pdimed.ai is hosted by Netlify. Forms on this site are delivered to us through Web3Forms. This site and the app’s onboarding page load fonts from Google Fonts, which receives your IP address.

We do not sell data. We do not give employers, hospitals, payors or insurers any view of your data. We do not rank or score physicians. We do not use your data to train AI models without your separate, explicit consent. The app has no advertising or analytics trackers.

Your account and vault. While your account exists; every stored version of your encrypted vault is kept until you delete your account.

Encrypted backups. Expire after 35 days.

Application and security logs. Kept indefinitely; they contain no clinical content.

Audit ledger. Kept permanently; it holds fingerprints only.

Export your vault at any time in the app. Correct your profile in the app. Delete your account by emailing dan@pdi-med.com — we delete your account, your encrypted vault including every stored version, and the data we hold for you, and confirm when it is done. Contribution to the Gray Zone Intelligence Network is not active.

If we are legally compelled to produce data, we can produce only what we hold: your encrypted vault, which we cannot decrypt, and the readable items described on this page. Where the law allows, we will tell you first.

Privacy questions and requests: dan@pdi-med.com. We aim to respond within 10 business days.