Privacy policy

Who we are

epnote is operated by PASTE_YOUR_FULL_LEGAL_NAME, 57299672066, a sole trader in Western Australia. This policy explains how we handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Questions and requests go to epnote.app@outlook.com.

Patient and report data never leaves your device

Client names, measurements, goals, notes, conclusions, funder details and the text of every report you write are stored only on your device, in your browser's own storage, encrypted. They are never sent to epnote's servers, to your account, or to any service we use, and we have no way to read them.

Reports are built in your browser. Word and PDF files, the filled DVA forms and the WorkCover WA Treatment Management Plan are produced on your device and downloaded straight from it. A backup you export is encrypted with a passphrase only you know; we cannot open it.

Before a report is exported the app asks our server for permission. That request carries the type of document and a random identifier for it, never the client, the content or any part of the report.

What an account stores

You can try epnote with the sample client without an account. To export a report you sign in by Google, by email and password, or by email link, and we create an account that holds only:

• your email address;
• your name, if you gave one when you signed up or if Google supplied it;
• whether you are a founding tester, and the dates of your invitation;
• how many reports you have exported, and the random identifiers of the documents that count toward the free limit;
• your practice settings, so they follow you between devices: letterhead, practice logo, signature image, your name, title and provider numbers, your saved conditions and favourite tests;
• the date the account was created and last changed.

The server refuses anything else. Your practice settings are the only part of your account you can change directly; the rest changes only through sign-in and export events.

Feedback

Feedback you send from the Feedback page or the "How was this report?" card is stored with its kind, your message, the template it is about, a thumbs rating if you gave one, your email address if you typed one, and the time. Please do not include patient names or details in feedback; if you do by mistake, email us and we will delete that item.

The services that process information for us, and why

• Supabase (Sydney, Australia): sign-in by Google, by email and password, or by email link, and the account database described above. Supabase holds your email address, your name if you gave one, and your account row in its Sydney region.
• Vercel (servers in Sydney, Australia): hosts and runs epnote. Vercel is a US company; its request logs record the method, path, status and duration of each request, never what was sent, and may be processed outside Australia.
• Google: if you choose Sign in with Google, Google confirms your identity and shares your name and email address with us. We receive nothing else from your Google account.
• Resend: delivers the sign-in link, the welcome email and our feedback alerts. Resend receives your email address and the text of those emails, and processes them on infrastructure that may be outside Australia.
• Google Fonts: the pages load their typefaces from Google, so your browser requests font files from Google when a page opens. Google receives the ordinary details of that request, such as your IP address. No report content is part of it.

These are the only services involved. We do not use third-party analytics, session recording, keystroke capture, advertising or tracking cookies, and we do not sell or share information about you.

Overseas disclosure

Your account and feedback are held in Australia, and the servers that run epnote are in Sydney. Vercel, Resend and Google are overseas companies: Vercel may process its own request logs outside Australia, Resend may process your email address outside Australia, and Google handles Sign in with Google on its own infrastructure. We rely on their published privacy commitments and limit what they receive to what each needs. No patient or report data is ever disclosed to anyone, in Australia or overseas, because it never leaves your device.

Usage counts

We count a few things to understand how epnote is used: sign-ups, exports per document type, how often the free limit is reached, upgrades by plan, and feedback sent. A count is a kind and a label such as a document type; it is not linked to a person and contains no content. These counts are kept by us and never shared with a third-party analytics service.

How long we keep information, and deletion

Your account exists until you delete it. "Delete account" on the Settings page removes the account row, the sign-in user and your synced settings; usage counts are not linked to you and are not affected.

Feedback is kept until you ask us to delete it: email epnote.app@outlook.com with roughly when you sent it and what it said, or the address you gave with it, and we will delete it within 30 days and confirm by reply. Documents on your device are yours to delete at any time from My documents, or by clearing your browser's site data for epnote.

Access and correction

You can see and change the personal information we hold about you in the app: your email and plan on the Account card, your practice settings on the Settings page. For anything else, or a copy of what we hold, email epnote.app@outlook.com; we respond within 30 days and correct anything that is wrong.

Complaints

If you think we have handled your information badly, tell us at epnote.app@outlook.com and we will look into it and reply within 30 days. If you are not satisfied with our answer you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

Changes to this policy

If how epnote handles information changes, this page changes with it and the date at the top is updated. A material change is announced in the app before it takes effect.

Contact

PASTE_YOUR_FULL_LEGAL_NAME, 57299672066. Email epnote.app@outlook.com.