Privacy
Policy
Last updated: July 2026
1. What we collect
When you use Deathstack, we collect the information you provide directly: your name, email address, and role when you register, and the hospital data you enter (departments, wards, beds, patients, appointments, admissions, lab orders, pharmacy stock, bills, and payments).
2. How we use it
Your data is used solely to provide the Service: authenticating you, displaying your dashboard, and computing derived figures such as bed occupancy and balances. We do not sell your data, use it for advertising, or use patient data to train models.
3. Where it lives
Account and application data are stored with our infrastructure providers (including Supabase for the database and authentication). Data is protected in transit with encryption and at rest by our providers' security controls, and access is restricted per-account through row-level security.
4. Patient information
Patient records entered into the Service — including demographics, diagnoses, lab orders and other health information — are sensitive personal data, and you act as the controller of that data. You are responsible for obtaining the consent and lawful basis required to hold it, for entering only what you are entitled to hold, and for removing it when it is no longer needed. We process it solely on your behalf to operate the Service.
5. Cookies
We use cookies strictly for authentication sessions and interface preferences (such as light or dark mode). We do not use tracking or advertising cookies.
6. Data retention & deletion
Your data is retained while your account is active. You may request deletion of your account and associated data at any time; we will remove it within a reasonable period, except where retention is required by law.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. Contact us to exercise these rights.
8. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by the date above; continued use of the Service after changes take effect constitutes acceptance.