Privacy Notice
Effective and last updated: October 26, 2026
1. Who operates VitaBridge
Olamide Olatayo Bello Corporation operates this VitaBridge development preview. This notice describes the current implementation; it does not claim that a production clinical-data service is available.
Account registration and sign-in
When the account service is deployed on the custom domain, signup stores your name, email, salted password hash, and creation time in a server database. Session tokens are stored as hashes on the server and as Secure, HttpOnly cookies in your browser for up to eight hours. Short-lived login-attempt records support rate limiting. Email verification and self-service account deletion are not yet implemented; contact us for account questions or deletion requests. Accounts are separate from the demonstration role and tenant controls and do not authorize real clinical workflows. Do not reuse a sensitive password. The private review environment may not run this account service.
2. Information handled by the preview
Demonstration bookings, medical-profile fields, care notes, tenant settings, users, orders, credits, and session activity are handled in browser memory. The current application has no connected backend database for these records, and they reset on reload or closure. They are visible to anyone with access to your current browser session. Do not enter real patient information, insurance identifiers, passwords, provider secret keys, or payment-card data.
3. Location and navigation
Choosing “Use my location & find hospitals” requests browser permission and sends your coordinates to the OpenStreetMap Overpass service to discover mapped hospitals within 25 km. Results and facility coordinates are kept only in the tenant’s demonstration session. Your search location is not added to the activity log. The provider receives the network request and handles it under its own practices. Search results are not verified emergency availability or clinical recommendations.
If you choose “Use my location” and grant your browser permission, coordinates are attached to the demonstration request in memory. Permission is optional; you can enter a fictitious pickup address instead. Opening navigation sends the selected pickup or destination text to Google Maps. That service then handles it under its own policies. No background vehicle telemetry is implemented.
4. Hosting and third parties
Website hosting and network providers may process IP addresses, request details, timestamps, and browser information in access or security logs. The private review site uses ChatGPT sign-in controlled by the hosting provider; the custom-domain deployment additionally provides its own account service as described above. Fonts load from Google Fonts, which receives network request information. Configured consultation links open an external provider. This notice does not control those providers’ independent practices or retention.
5. Cookies and offline storage
VitaBridge uses a session cookie for its deployed account service but does not add advertising cookies or analytics tracking. Its service worker caches application files, branding, and artwork for offline loading. It does not cache medical-profile forms, care records, or payment details. Hosting and identity providers may use their own cookies. You can clear site data and revoke location permission through browser settings.
6. Communications and payments
No SMS, contact alert, telemedicine media, or payment is sent through the current preview. Contact-form demonstrations do not send invitations. Payment settings accept environment-variable names only and do not connect provider accounts. If you email us, your message and address are processed through the email provider to respond to your request.
7. Purposes, retention, and choices
The preview processes demonstration inputs to display and test requested workflows. Browser-memory records last only for the current page session; cached application files remain until replaced or cleared. Hosting and email retention depend on the relevant provider and operational settings. No specific retention duration for those independent systems is promised here. Close or reload the page to discard in-memory records, clear browser site data to remove caches, and avoid external links if you do not want their providers to receive a request.
8. Security and sensitive information
The preview is not an approved repository for patient information. Tenant switching and role selection are not security boundaries. No HIPAA, GDPR, or other regulatory certification is claimed. Any operational launch requires a separately configured secure backend, access controls, appropriate agreements, retention policies, and an updated notice describing actual processing.
9. Children, requests, and updates
This preview is for evaluation and is not intended to collect information from children. For privacy questions, correction or deletion requests, or concerns about information sent to us, contact dobcalldemo@gmail.com. Applicable rights depend on your location and the processing involved; we will assess requests accordingly. Do not include medical details or credentials in an initial request. Updates to this notice will appear here with a revised date.