Privacy policy

Information we handle

When you create a report, we store the report name, selected hospital, catchment radius, generated report, report identifier, source receipts, status, errors, and timestamps. A report does not require a user account and should not contain patient information or other personal data. Report names are free text, so do not put confidential or identifying information in them.

Our hosting provider may process routine request and service logs, including IP address, browser or client details, requested URL, time, response status, and diagnostic events. Your browser stores the UUIDs of reports it created so it can show your local report history.

If you allow analytics, PostHog processes a random browser identifier, IP address, page views, interactions, device and browser details, errors, and masked session replays. We mask all form inputs and clicked text, and we do not send report names as analytics properties. PostHog and this application use browser storage to remember the random identifier and your analytics choice. We do not use this information for advertising.

How and why we use information

We use this information to create and reopen reports, operate and secure the service, diagnose failures, prevent abuse, and meet legal obligations. Where the GDPR or UK GDPR applies, our legal bases are our legitimate interests in providing and protecting the service, taking steps you request before providing the service, and compliance with law. We do not sell personal data or use it for targeted advertising. We process optional analytics and session replay with your consent. You can change that choice through "Analytics settings" in the footer.

Reports are not private

Reports persist on the server and can be reopened by their unique link. The service does not publish a global report list, but anyone who has a report's UUID can view it. Do not use a report title or link to share confidential information.

Providers and disclosures

Railway hosts the application, database, logs, and object storage. PostHog provides optional product analytics, error capture, and session replay. To build a live report, we send the hospital location, geographic bounds, dates, and related request details as needed to FortyGuard and Open-Meteo. We read population data supplied by WorldPop from our object storage. These providers process data under their own terms and privacy notices. We may also disclose information if law requires it, to protect the service or others, or as part of a corporate transaction.

Groundswell is a United States company, and providers may process information in the United States or other countries. Where data protection law requires a transfer mechanism, we use an approved mechanism for that transfer.

Retention and security

Reports and analysis records currently have no automatic deletion date. Logs and PostHog data are kept according to each provider's configured retention. We keep information only while it is needed for the purposes in this policy, then delete or anonymize it unless law requires longer retention. We use technical and organizational safeguards suited to the information, but no internet service is completely secure.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data, and to object to some processing. You may also withdraw consent where processing relies on consent. Email hello@groundswell.earth to make a request. We may need to verify your identity. EEA and UK residents may complain to their local data protection authority. You also have the right to complain to us first, and we would like the chance to address the issue.

Children and policy changes

This service is intended for hospital and public-health planning, not children. We do not knowingly collect personal data from children. We may update this policy as the service changes. We will post the revised policy here and change the effective date.

Contact

Groundswell Earth, Inc.
groundswell.earth
hello@groundswell.earth