Privacy policy
Last updated: June 2026
The most important rule: no patient identifiers
Expert Radiology is designed to work with de-identified case descriptions only. Do not enter patient names, medical record numbers, dates of birth, phone numbers, addresses, or any other identifier. The service runs an automated screen that blocks obvious identifiers, but that screen is not perfect and does not shift this responsibility: you must de-identify cases before submitting them.
What we collect
Account data: your email address, password (stored as a salted hash, never in plain text), role, and sign-in timestamps. Access requests: the name, email, role, subspecialty, country, and message you submit on the request-access form, used only to evaluate and respond to your request. Case data: the case text you submit, the generated analyses, and your saved or pinned cases, stored so you can revisit them. Usage data: per-request token counts and model costs, used for capacity and billing oversight.
Third-party AI processing
Case text you submit is sent to large-language-model providers via OpenRouter to generate the analysis. This is why the no-identifiers rule matters: this processing is not covered by a healthcare business associate agreement (BAA), and the service is not HIPAA- or GDPR-certified for patient-identifiable data. De-identified clinical descriptions only.
Cookies and local storage
Signing in sets a single, strictly necessary session cookie (HttpOnly — not readable by page scripts). Interface preferences such as sidebar state are kept in your browser's local storage. There are no advertising or third-party analytics trackers.
Retention and deletion
Cases and account data are retained while your account is active. To have your account or stored cases deleted, contact us (below) and we will remove them from the live database.
Contact
Privacy questions or deletion requests: use the contact form at moshibah.com.