Privacy
What we keep. What we don't.
Placeholder — final policy is drafted in Phase 3.1 from Legal/ + dataprivacy.md.
The short version
TKF is a pass-through. Patient referrals are read once to produce a triage card, then dropped — they are never written to a database or disk on our servers.
Where processing happens
Referrals are processed inside an Australian cloud region (Sydney / Melbourne). They are not sent offshore, not retained, and not used for training.
What is stored
Only non-patient plumbing: clinic accounts (email, login) and subscription status. No patient identifiers, no referral text, no extracted facts.
Your rights
Final access/correction wording, the data-processing agreement, and contact details are completed before any real patient referral is processed (Phase 3.1).