Privacy Policy

WhyRisk is operated by its maintainer (“we”, “us”). Questions about this policy or your information: contact@abdulwahid.me.

• Account information. When you create an account we store your name, email address, role (patient, doctor, or other staff), and — depending on role — professional details you provide (for doctors: speciality, licence number, qualifications) or profile details (for patients: phone number, gender, date of birth).
• Clinical information. Care teams record patient information in the platform: demographics, vital signs, laboratory results, diagnoses, and related notes. This information is entered by your care team, not collected from your device.
• Risk assessments. When a clinician runs the prediction model, the platform stores the input values used, the resulting risk score, the model's explanation of that score, and the model version.
• Appointments. Booking an appointment stores the patient, the doctor, the time, and the reason given.
• Messages you send us. If you use a contact form, we receive your name, email address, and message.
• Assistant conversations. The in-app AI assistant processes the text you type (and, for doctors, the patient context shown in the app) to generate a reply. Conversations are not used to train the risk model.

• To run the service: showing records to the care team treating the patient, generating risk estimates and explanations, managing appointments and alerts.
• To keep the service safe: access is role-based. Patients can see only their own information; clinicians can see the information of patients in their care.
• To reply to messages you send us.

We do not sell personal information, and we do not use clinical information for advertising.

Risk scores are statistical estimates produced by a machine-learning model trained on the CDC BRFSS 2015 survey dataset (70,692 records). A score is an educational and decision-support aid. It is not a diagnosis, and it does not replace a clinician's judgement.

The public quick check on the home page runs the same model. Answers given there are sent to the model service to compute the estimate and are not stored and are not linked to any account.

We use a small number of infrastructure providers to run the service: hosting and database (Vercel and Supabase) and email delivery (Resend) store and transmit the data described above, and the AI assistant is powered by Google's Gemini models, which receive the text needed to answer. These providers process data on our behalf; we do not grant them any right to use it for their own purposes.

The platform may contain clearly labelled demonstration records (names and values marked as demo data) used to show how the system works. Demonstration records are not real patients.

Accounts are protected by passwords and role-based access controls, and data moves over encrypted connections. No system is perfectly secure; if we become aware of a breach affecting your information, we will tell you.

Records are kept for as long as the account or care relationship exists. Demonstration data can be removed at any time.

• You can review the information on your profile in the app.
• You can ask us to correct or delete your account and associated information by writing to contact@abdulwahid.me. Clinical records that form part of a care record may need to be retained where the care provider is required to keep them.
• If you are a patient and believe information in your record is wrong, tell your care team or contact us.

If this policy changes materially, we will update this page and the date at the top.