Privacy Policy

EaseMed is a clinical clerking system built for medical students and healthcare learners, primarily in Uganda. It is structured around Hutchison's Clinical Methods and provides structured modules for history-taking and patient documentation during ward attachments.

This Privacy Policy explains how EaseMed collects, stores, and uses the personal information you provide when creating an account or using the platform.

We collect two categories of information:

We use the information collected to:

• Create, maintain, and secure your EaseMed account
• Allow you to save and retrieve clinical clerking records
• Enable administrators and supervisors to review clerkship activity
• Monitor for unauthorised or suspicious access via session logs
• Send important account communications (e.g. email verification, password reset)
• Improve platform stability and user experience over time

When you clerk a patient using EaseMed, you may enter clinical information about that patient. As the person entering that data, you are responsible for ensuring it is handled appropriately.

EaseMed stores patient clerking data on your behalf as a data processor. You, as the user, remain the data controller for any patient data you enter.

EaseMed uses Supabase as its backend database and authentication provider. Your data is stored on Supabase's secure cloud infrastructure. Supabase uses industry-standard encryption (AES-256 at rest, TLS in transit) and is compliant with SOC 2 security standards.

By using EaseMed, you consent to your data being processed and stored on Supabase's infrastructure, which may be hosted outside Uganda.

We do not sell, rent, or share your personal data with third parties for commercial purposes. We may share limited data only in these circumstances:

• Administrators & Supervisors: Authorised EaseMed administrators at your institution can view your clerking records and session activity for oversight purposes.
• Service Providers: Supabase (database), Vercel (hosting and analytics). These providers only process your data to deliver the service.
• Legal requirements: If required by Ugandan law or a valid legal authority, we may be required to disclose certain data.

EaseMed offers sign-in via Google OAuth. If you choose to sign in with Google:

• We receive your name, email address, and Google profile picture from Google.
• We do not receive your Google password.
• Your use of Google sign-in is also governed by Google's Privacy Policy.

You have the following rights regarding your data on EaseMed:

We retain your account data for as long as your account is active. If you request deletion of your account, we will remove your personal data from our systems within 30 days, except where we are required by law to retain it longer.

Clinical records you have entered may be retained by your institution's administrator for audit or educational review purposes, in line with your institution's own data retention policy.

EaseMed uses minimal browser storage (localStorage) to remember your login session. We use Vercel Analytics to collect anonymous, aggregated usage statistics — this does not identify you personally and does not use advertising cookies.

We do not use third-party advertising cookies or tracking pixels of any kind.

We may update this Privacy Policy periodically. The effective date shown at the top of this page will reflect any changes. If changes are significant, we will notify you via your registered email address. Continued use of EaseMed after an update constitutes your acceptance of the revised policy.

For any privacy-related questions, data requests, or concerns, please contact us: