Legal

Privacy policy

Last updated 4 November 2026

Who we are

GastroGuide (the website at gastroguide-ie.vercel.app) is an educational clinical knowledge resource for healthcare professionals, operated by GastroGuide, Ireland. Contact: gastroguide-support@googlegroups.com.

What we collect

Your account: GastroGuide is free, but you need an account to use it. You create one with a username and a password of your choice: we do not ask for an email address and we do not send you email. We store your username and your password only in encrypted (hashed) form, handled by our sign-in provider, Supabase Auth; the password cannot be read by us or by anyone, so a forgotten password cannot be shown, only replaced. You may link a Google account so you can get back in if you forget your password: when you choose “Link Google” or “Continue with Google”, Google confirms who you are and shares your Google email address and the name on your Google account with us, and we store that Google email with your account. We never see your Google password. If you do not link Google we hold no email address for you. Some earlier accounts were made with an email address; that address stays with those accounts until they are deleted. You can also give a role (optional) and change the name shown on your profile. We use these only to let you sign in and show your profile. We do not send marketing email or share your details with anyone.
Sign-in cookies: to keep you signed in, your browser stores a small sign-in cookie. It is strictly necessary for the service, contains no tracking and is removed when you sign out.
On your device only: bookmarks, favourites, notes, collections, revision plans, learning progress and settings are stored in your browser or app storage on your own device. They are not sent to us. You can export or delete them in Profile and settings. GastroGuide has no offline download feature; your browser may keep copies of pages you have already opened so they load faster.
Hosting logs: our service providers (Vercel for the website; Supabase for sign-in and the content database; Google for Google sign-in, under Google’s own privacy policy) process technical data such as IP address, device and browser type and request times to deliver and secure the service.
Feedback: the Feedback form does not store anything on our servers; it opens your own email app with your message (and the name and email you signed in with) so you can review it before sending.
Anonymous usage statistics: see below; you can turn them off.
We do not use advertising, tracking cookies, analytics profiling or sell data.

Anonymous usage statistics

To see which parts of GastroGuide are useful, we count how it is used, anonymously. We collect: the pages and tools opened (as a page type and its topic, e.g. “topic: ascites”), a random session number that changes every visit, how long the app was in use while on screen, the device type (phone, tablet or desktop), the broad group of your profile role if you gave one (doctor, nurse, pharmacist, student or other — not your grade), and simple counts such as how many results a search returned or whether a Daily 5 answer was right. Page views are also counted by Vercel Web Analytics, without cookies and with every web address shortened to the page itself.

We never collect your name, email address, what you type into search, calculator inputs, IP addresses or any patient information, and the statistics are not linked to your account.

The statistics are stored by Supabase (EU) and Vercel and kept for up to 13 months (older records are deleted automatically every night). To opt out, turn off “Share anonymous usage statistics” in Profile and settings; nothing is sent while it is off, or when your browser asks sites not to track you (Do Not Track).

Patient information

Do not enter patient-identifiable information anywhere in GastroGuide, including in feedback. Calculators and search run on your device and their inputs are not stored or sent to us.

Legal basis, retention and your rights

We process hosting data on the basis of legitimate interests (operating and securing the service) and keep it only as long as our providers’ logs are retained. Account data is processed to provide the account you asked for (contract) and is kept until you delete your account, which you can do at any time on the Account page (deletion is immediate) or by emailing us. Under the GDPR you may request access, correction or erasure, object to processing, or complain to the Irish Data Protection Commission (dataprotection.ie). Contact us at the address above.

Children

GastroGuide is intended for healthcare professionals and is not directed at children.

Changes

We will update this page if our practices change, and revise the date above.