PRIVACY POLICY
// Last updated: October 4, 2026
The AI Medicine Collective is a group of residents at the University of Cincinnati who build and share AI tools for medicine. This page explains what information this website collects, why, and what you can do about it. The Collective is run by volunteers. It is independent: it is not affiliated with, sponsored by or endorsed by the University of Cincinnati, and this website is not a university service.
// What we collect
- Membership requests. When you request membership, we store what you tell us about yourself: your role, program, interests, and any message. Only you and our moderators can see these details.
- Sign-in with email and a password. If you choose this instead of Google, we receive the email address you type, and we email a one-time code to confirm it (and again if you forget your password). Your password is stored by our sign-in provider, Supabase, in scrambled form; we cannot see it.
- Sign-in with Google. When member sign-in is available and you choose to use it, Google shares your name, email address, and profile picture with us. We never see your Google password, and we do not ask for access to your email, files, contacts, or calendar.
- Content you post. When member features are available, anything you submit (projects, learning materials, comments, chat messages) is stored with your account so other members can see who posted it.
- Your member profile. If you choose to fill it in (program, training level, focus areas, a short bio, an optional contact address and link, institution), approved members can see it. Approved members also see you in the member list; you can hide yourself from that list under "Your profile" on your account page. Signed-out visitors see neither.
- Tool requests and votes. Requests you post, the ones you upvote, and the ones you say you'll build are visible to approved members.
- Learning progress. Materials you mark as done are saved so your progress follows you between devices. Approved members can see whether you've completed the core path.
- On your device only. The Tools page remembers the last few tools you opened, and your account page remembers if you hid the getting-started list. Both stay in your browser and are not sent to us.
- Email alerts. When another member sends you a private message, we email you a short notice with a link to your inbox. The email does not contain the message. You can switch these alerts off under "Your profile" on your account page.
- Meeting votes. The times you tick for the monthly meeting are saved, and other members see how many people ticked each time (not who). If the time you ticked is confirmed, we email you a confirmation with a calendar invite.
- Weekly digest. Approved members are emailed a weekly digest of briefings and new projects. Each copy is sent to one person, so no member sees another's address. You can switch it off under "Your profile" on your account page.
- Private messages. A message you send to a project's author, and any replies, can be read only by the two of you. Your email address is not shown to other members; moderators can see it in order to manage memberships.
- Basic technical data. Our hosting provider keeps standard server logs (such as IP address and browser type) to keep the site running and secure.
We do not use advertising or analytics trackers. The site stores a small amount of data in your browser only to remember that you are signed in.
// How we use it
- To review membership requests and reply to you.
- To let you sign in and to show your name next to what you post.
- To moderate content and keep the site safe.
- To send Collective updates, such as the newsletter, if you asked to receive them.
Information received from Google is used only to create and identify your account on this site. We do not sell your information, share it with advertisers, or use it to train AI models.
// Services we rely on
These companies process data for us so the site can work:
- Netlify: hosts the website.
- Formspree: emails our organizers when a new membership request arrives.
- Supabase: stores member accounts and member content.
- Google: provides sign-in, if you choose it.
- Resend: delivers the emails we send you, such as sign-in codes.
- Cloudflare: runs a short automated check on the email sign-in form to keep bots from guessing passwords. It is loaded only on the account page.
- YouTube (Google): plays the videos on the Learning page. Nothing is loaded from YouTube until you press play on a video.
Collective moderators can see membership requests and member content in order to review them.
// No patient information
Never submit patient information anywhere on this site: no names, dates, record numbers, images, or case details that could identify a patient. Moderators remove such content when they find it.
// Your choices
- You can ask us to show you, correct, or delete your information, including your account, at any time by emailing the address below.
- You can remove this site's access to your Google account at any time in your Google Account settings, under third-party connections.
We keep membership requests and account information for as long as you are a member or until you ask us to delete them.
// Changes and contact
If this policy changes, we will update this page and the date at the top. Questions or requests: zaffutbn@ucmail.uc.edu.