Privacy Policy
Who we are
POCUS Passport is provided by EMUGs (Emergency Medicine Ultrasound Groups). It is a digital logbook and assessment tool for point-of-care ultrasound (POCUS) training aligned with ACEM modules. EMUGs is not a credentialing or certification body.
What information we collect
We only collect what the app needs to work:
- Account details: your name, email address and password. Passwords are stored in hashed form by our authentication provider; we cannot read them.
- Profile details you choose to give: hospital, job title, the type of credentialing you are aiming for and whether you registered as a trainee or a supervisor.
- Logbook entries you create: scan date, module, and the clinical details you type (such as presenting complaint, indication, findings, learning points and comments). Optional fields exist for patient age/sex, MRN and date of birth; please do not enter patient-identifying information (see the De-identification & Liability Policy in the app).
- Images and clips you attach to an entry. Location and other metadata embedded in photos is removed before upload.
- Reviews and assessments written about your entries by your supervisors, and the supervisor(s) you choose.
- Notification details: your notification preferences, and a push notification token that identifies your phone to Apple's notification service.
- A record of when you agreed to the De-identification & Liability Policy.
Camera and photos
The app asks for access to your camera or photo library only when you tap to add an image to a logbook entry. It does not access them at any other time.
How we use your information
Your information is used to run the logbook: to save your entries, let the supervisors you choose review them, and show you your progress. We do not use it for advertising, we do not sell it, and the app contains no advertising or analytics trackers. We also use your email address and push token to tell supervisors when a trainee submits a scan, and to tell trainees when a scan has been reviewed. These messages never include patient details or scan content, and you can switch them off in My Profile.
Who can see it
- You can see your own entries, images and reviews.
- Supervisors can see the entries, images and reviews only of trainees who have chosen them as their supervisor.
- EMUGs program administrators can access the data in order to run and support the service.
Where it is stored and how it is protected
Data is stored with our hosting provider, Supabase, in a data centre in Sydney, Australia. Images are held in a private store and are shown only through short-lived secure links. Access to data is restricted by database access rules so that people can only see what is described above. Information is sent over encrypted connections.
To deliver notifications we use two service providers: Resend (to send email) and Expo and Apple (to deliver push notifications). They receive only what is needed to deliver a message: your email address or push token, and the short message text.
Keeping and deleting your information
We keep your information until you delete your account. You can delete your account at any time in the app: open My Profile and tap Delete Account. This permanently removes your profile, logbook entries, images and supervisor links. If you were a supervisor, reviews you wrote remain on trainees' records but no longer show your name. Routine backups made by our hosting provider may keep copies for a limited time after deletion.
Children
The app is intended for health professionals and trainees. It is not intended for children.
Changes to this policy
If we change this policy we will update the date at the top. Material changes will be notified in the app.
Contact us
Questions, access or correction requests, or privacy concerns: please email central@emugs.org.