Fictional-scenario demo and information sources

This independently developed public demo is for adults aged 18 or over testing fictional adult scenarios. It is not a company, hospital or real healthcare service. Do not enter real health information or identifiers, including in files. Submitted showcase cases may be available to authorized demo doctor accounts in the same configured demo hospital; those accounts do not provide healthcare. User text is not assumed anonymous or synthetic merely because this is a demo.

A local privacy gateway reduces known account identifiers and recognizable identifiers in text before AI requests, including conversation replay. It is not infallible anonymization. OpenAI store:false does not by itself disable all provider retention or establish HIPAA compliance.

Approved general health explanations may use permitted MedlinePlus health-topic summaries. Source details are available in the results section. General descriptions are separate from the AI’s personalized, uncertain assessment.

01

Who operates this public demo

Alhan Akdemir is the owner and developer of SafeSymptom and the individual operator/data controller for the processing described in this notice. SafeSymptom is an independent personal project, not a healthcare organization. The operator determines processing purposes, permissions and application access.

privacy@safesymptom.com

02

Data we receive and where it comes from

  • Google account identifier, name, email, and sign-in events from you and Google OAuth.
  • Fictional scenario inputs you provide: age range, biological sex/pregnancy context, allergies, conditions, medications, symptoms and chat responses. If real health information is entered despite the warning, it can still be processed and requires appropriate protection; the warning does not remove that responsibility.
  • AI questions, risk classifications, possible-condition explanations, and clinician summaries generated from your assessment.
  • Demo doctor messages, consultation-flow records, attachments, simulated prescriptions, lab orders, follow-ups and appointments when those demo features are used. These are not real healthcare records or services.
  • Security and reliability events such as session, route, rate-limit, and redacted error information from our systems.

03

Why we process it

We process account and interaction information to authenticate users, generate fictional-scenario AI responses, apply safety rules, display demo results and consultation flows, send selected or necessary account/workflow messages, secure and debug the demo, meet applicable legal obligations and answer privacy requests. Separate demo-evaluation permission covers the limited developer review described below.

Our line in the sand

We do not sell health data, use it for targeted advertising, or use health-data geofencing. We do not intentionally add your name or email to AI prompts. Identifiers you type into free text can still reach the active AI provider.

Separate permission for developer review

Participation requires an unchecked, separate demo-evaluation choice allowing the owner and developer of SafeSymptom to review new test messages, AI responses and related interaction records for product quality, safety and usability. The information-notice acknowledgement and provider-processing consent remain separate, and email reminders remain optional. This is a participation condition for this test demo, not a legally validated consent arrangement or a waiver of legal rights.

Review is limited to tests started after the new permission was recorded and while permission remains current. A new grant does not cover older conversations, including conversations from before withdrawal and re-consent. Withdrawal ends permission for future evaluation use, including review of previously eligible records. No automated evaluation pipeline, model training or new review dashboard is enabled by this update. This permission does not authorize public sharing or transfer to third-party evaluation programs such as IBM.

04

Retention and deletion

CURRENTAutomation enabled

This status reflects the application mode and operational switch, not a guarantee that every scheduled run succeeds. Paused or failed work can delay deletion.

NEW DEMO GROUPS30 days inactive

Newly enrolled demo conversations become eligible for scheduled cleanup 30 × 24 hours after the linked group’s last meaningful interaction. Messages, completed AI responses, attachments and saved consultation actions renew the period; viewing does not. Existing records, their continuations and fixed synthetic datasets are not reclassified.

SEPARATEOther records

Account, security, consent evidence and rights-request records have separate purposes. No verified automatic expiry is promised here.

Linked transfers are cleaned together, including conversation content, encrypted operation inputs/responses, attachments and related demo records. Active model or upload work, calls or room cleanup, outstanding appointments/follow-up rights, and links to records outside the group defer cleanup. An open chat alone does not prevent expiry. Once deletion starts, that conversation cannot receive new content; start a new demo instead. Independent patient history is not added to the deletion scope merely because a doctor viewed it.

You can submit and track deletion requests in the Privacy Center. Withdrawal alone does not delete records. Application conversations, storage objects, backups and provider logs do not share a single deletion schedule. Provider retention depends on the applicable service and configuration; exact backup and provider-log deletion times have not been verified for this demo. Necessary evidence may be retained where an applicable legal obligation permits or requires it; the response to your request should explain any exception.

05

Service providers and data flow

Providers for the listed features are shown below; processing depends on the feature used. The AI entry follows the configured provider.

GOOGLE

Google OAuth

Purpose
Secure account sign-in
Data
Google account identifier, name, and email
When
When you sign in with Google
Provider privacy notice ↗
VERCEL

Vercel / Speed Insights

Purpose
Application hosting, security, and non-content performance measurement
Data
HTTP request, approximate network/device data, and page performance metrics; symptom content is not sent to performance analytics
When
When you use the application
Provider privacy notice ↗
SUPABASE

Supabase

Purpose
Database hosting, Storage file storage and Realtime infrastructure as a data processor
Data
Real account information, fictional scenario profiles, test conversations and records/attachments from demo flows used
When
When account and relevant demo features are used; infrastructure encryption is separate from application field encryption
Provider privacy notice ↗
SENTRY

Sentry

Purpose
Error and reliability monitoring
Data
Redacted error and route data; request bodies, cookies, IP addresses, and session replay are not sent
When
When a technical error occurs
Provider privacy notice ↗
RESEND

Resend

Purpose
Transactional and optional emails you choose
Data
Email address and necessary notification content
When
When an email notification is sent
Provider privacy notice ↗
LIVEKIT

LiveKit

Purpose
Audio/video connection in the demo consultation flow
Data
Session identifier and realtime media stream; calls are not recorded
When
When a connection is started in the demo call flow
Provider privacy notice ↗
AI

OpenAI (ChatGPT/GPT)

Purpose
AI demo responses to fictional symptom scenarios
Data
Symptoms, chat answers, age range, biological sex/pregnancy context, allergies, chronic conditions, and medication context. SafeSymptom does not add your name or email to the prompt; identifiers you type in free text may be transmitted.
When
When you start an assessment
Provider privacy notice ↗

Supabase, encryption and shared responsibility

Supabase provides database hosting, file storage and realtime infrastructure as a processor/service provider for application data, not as a joint controller or guarantor of all security. Supabase is responsible for its infrastructure safeguards. The project operator remains responsible for processing purposes, permissions, application access controls, key management and correct configuration. Using a provider does not remove those duties.

Encryption limits

Supabase documents encryption at rest and in transit for its infrastructure. Separately, SafeSymptom encrypts selected sensitive application fields server-side using AES-256-GCM. This does not mean every field or uploaded file has that additional application encryption. Authorized application processes can decrypt protected fields, and authorized reviewers may access permitted content. This is not end-to-end encryption, an assurance that nobody can read records, or a guarantee of complete security or HIPAA/KVKK compliance.

Supabase shared responsibility model ↗ · Supabase Data Processing Addendum ↗

06

Rights we offer every user

Regardless of where you live, you can access and export your information, request correction through your profile or support, request health-data or account deletion, withdraw future processing consent immediately, object to processing, track status and reasons, and appeal a denial. Our target response time is 30 days.

Open Privacy Center →

Withdrawal blocks new demo tests and future developer-evaluation use, but keeps the Privacy Center, export, deletion requests and contact available. It does not undo past processing. Our response-time target is not a record-retention or automatic-deletion promise.

U.S. Consumer Health Data Addendum

U.S. Consumer Health Data Addendum

Even in a fictional-only demo, health-related inputs and AI inferences may qualify as consumer health data if linked to a real person. Sources are user inputs, demo workflow participants, account providers, system events and AI outputs. The categories, purposes and recipients are listed above. Applicable U.S. state requirements depend on the facts; this notice and a required checkbox do not establish compliance with every state law.

Use the authenticated Privacy Center or privacy@safesymptom.com to exercise access, deletion, withdrawal, objection, and appeal rights. We authenticate requests through your signed-in account and target a response within 30 days. These rights are offered to everyone, not only Washington residents.

HIPAA

This public demo is not offered by or on behalf of a U.S. HIPAA covered entity under a business associate agreement. SafeSymptom does not represent this public demo as HIPAA compliant. Other U.S. consumer, privacy, security, and breach-notification rules may still apply.

Türkiye / KVKK Eki

Türkiye / KVKK Eki

Veri sorumlusu kimliği ve iletişimi yukarıdaki işletmeci bölümündedir; şirket olmamak KVKK yükümlülüklerini kendiliğinden kaldırmaz. Veriler Google girişi, uygulama formları/sohbetleri ve sistem kayıtları gibi elektronik yollarla toplanır. Hesap ve talep işlemleri için sözleşmenin kurulması/ifası, uygulanabilir hukuki yükümlülükler ve gerekli, ölçülü güvenlik işlemleri için meşru menfaat gibi KVKK md. 5 şartlarının somut işleme bakımından değerlendirilmesi gerekir. Sağlık verisi işleme ve ayrı demo incelemesi için açık rıza talep edilir; md. 6 şartlarının ve katılım şartına bağlı rızanın geçerliliği ayrıca hukuk incelemesi gerektirir. Aydınlatmayı okuma bildirimi rıza yerine geçmez.

Listelenen uluslararası sağlayıcılara aktarım Türkiye dışındaki işlemeyi içerebilir. Supabase DPA’sı, yabancı standart sözleşmeler veya onay kutuları KVKK md. 9 kapsamındaki yurt dışı aktarım şartlarını kendiliğinden tamamlamaz. Uygulanabilir aktarım mekanizması ve gerekli usuller bu metinle doğrulanmış sayılmaz; ayrıca değerlendirilmelidir.

KVKK md. 11 ve 13 kapsamındaki bilgi edinme, erişim, düzeltme, silme/yok etme, alıcıları öğrenme ve yalnız otomatik analizle aleyhe sonuca itiraz gibi haklarınız için Gizlilik Merkezini veya privacy@safesymptom.com adresini kullanabilirsiniz. Başvurular en kısa sürede ve en geç 30 gün içinde yanıtlanmalıdır; kimlik doğrulaması gerekebilir. Bu süre otomatik veri silme takvimi değildir.

SafeSymptom demo çıktısı resmî tıbbi kayıt değildir; e-Nabız veya MHRS yerine geçmez. İsteğe bağlı demo e-posta izni pazarlama izni değildir. Onay kaydı sınırsız kullanım hakkı sağlamaz ve işletmeci/sağlayıcı sorumluluklarını ortadan kaldırmaz.