Your data.
Clear commitments.

1. Your point of contact

For questions about your personal information, contact the OncoRegimen team at contact@onregimen.com or call +212 660 365 580.

OncoRegimen administrators review new registrations, manage roles and review contributions. They have access to the information described below for these purposes.

2. Data we collect and how we use it

We receive information you provide, information updated by OncoRegimen administrators and technical data needed to communicate with the service.

• Account and contact details. Your first name, last name, email address, account identifier and hashed password are used to create your account, authenticate you, verify your email and restore access. A phone number is required when creating a new account and is stored in your contact profile.
• Professional profile. Specialties, country, city, institution and, when provided, languages, education, experience and profile images are used to present your profile to OncoRegimen administrators. Country and city are entered manually; the app does not request your GPS location.
• Account access. Roles, permissions, administrator status, email verification, admission requests, decisions, dates and any accompanying notes are used to control access. New registrations are reviewed before access is granted.
• Contributions and approvals. Proposed protocols, edits, library blocks, review comments, approval decisions and dates are associated with their authors to organize work and track changes.
• Sessions and requests. Session identifiers, sign-in and expiration dates, browser or app information, search queries and requested resources support authentication and the display of results. Infrastructure may also process IP addresses, timestamps, requested URLs and errors in technical logs to operate and protect the service.
• Support requests. When you contact us, we receive your email address, message and any attachments you choose to send so we can handle your request.

Previews on the public website are illustrative. The public catalogue loads only categories and subcategories; its search filter runs in your browser. In the signed-in application, protocol searches are sent to our server to retrieve results.

3. Calculation inputs

Values entered for dosage calculations — weight, height, age, sex, creatinine and target AUC — are processed locally in your browser or the iOS or Android app. In the current version, these tools do not send calculation inputs to our server or store them in a patient database. Values remain in memory during the calculation session.

The apps do not use HealthKit or Health Connect and do not access health data from other apps. Do not enter information identifying a patient in protocols, comments, search fields or support messages: this content may be sent to the service or shared with other users of the library.

4. Who can access your data?

• OncoRegimen administrators and contributors. Administrators can review registrations, edit member profiles and roles, and grant administrator access. Contributions and their authorship are visible to the people who review them.
• The service team. People responsible for support, operations or security may access information as needed to perform their work.
• Technical service providers. Hosting, database, storage and email providers process information needed to deliver the service. Resend is used for verification and password reset emails and receives information including the recipient address and message content.
• Legal obligations. Information may be disclosed when required by law or a valid request from an authority, or to protect the rights and security of the service.

Providers entrusted with data must protect it to a standard at least equivalent to this policy and applicable requirements, use it only to deliver the services assigned to them and restrict access to authorized people. We do not sell your data or share it for targeted advertising.

PubMed reference checks concern protocol bibliographic references; they do not require your profile or calculation inputs. When you open a link to PubMed or another external website, that website receives technical information about your visit and applies its own privacy policy.

5. Cookies and third-party services

The public website does not set application cookies or include advertising or audience analytics tools. Fonts and graphics are served with the website.

The signed-in platform uses session cookies needed for authentication and local storage for interface preferences such as a collapsed sidebar. The iOS app stores sign-in tokens in the system Keychain, and web sessions displayed within it also use cookies needed for authentication. The Android app stores sign-in tokens encrypted with a key held in the Android Keystore.

The current version does not include advertising SDKs, cross-app tracking or third-party audience analytics. You can clear website data in your browser; this may sign you out and reset preferences, but it does not delete your account from the server.

6. Retention and deletion

Profile and access information is retained for the duration of account use. Inactivity, a declined admission request or uninstalling the app does not automatically delete this data. You can delete an active, pending or declined account yourself, or ask us to delete it.

Sessions and verification or password reset links have a limited validity period. Expiration prevents their use; it does not mean every related technical record is immediately erased. Logs, support correspondence and backups are kept as needed for security, request resolution and recovery, then deleted or anonymized when no longer required.

To delete your account, sign in, open Account and choose “Delete account” on the web platform or in the iOS or Android app. Your account, profile, sessions and pending verification links are deleted immediately. If you cannot sign in, or want other personal data removed, use the contact page or email contact@onregimen.com. We may need to verify your identity. We will explain how your request will be handled and the expected timeframe.

Deletion covers the account and its associated data, rather than simply deactivating access. Some information may need to be retained for a legal obligation, a dispute or the traceability of shared contributions. If so, we will explain which data is affected, why it is retained and for how long. Personal identifiers that are no longer needed are removed or anonymized. Residual backup copies are removed as backups rotate and are not used for routine operations.

7. Your rights and choices

You can edit your profile in the Account section of the app or platform when your access permits. You can also ask us to provide access to your information, a copy, a correction or deletion, including when you can no longer sign in.

Depending on applicable law, you may also request restrictions on processing, object to processing or request data portability. Where processing relies on your consent, you can withdraw it by contacting us; withdrawal does not affect processing already carried out. Optional profile information can be removed. Data necessary to operate your account remains essential to using the signed-in library.

Send your request to contact@onregimen.com, identifying the account and explaining what you need. Do not send your password. If needed, we will specify the minimum information required to verify your identity. You may also contact the relevant data protection authority in your country.

8. Security and hosting

Connections to our production services use HTTPS. Passwords are hashed, and access to the platform is controlled through authentication, account approval and permissions. iOS app tokens are kept in the system Keychain, Android app tokens are encrypted with an Android Keystore key, and dashboard tokens use cookies that cannot be read by page JavaScript.

Your data is processed by hosting, database and email services needed to operate OncoRegimen. Depending on their location, processing may take place outside your country of residence. Transfers must have the safeguards required by applicable law. You can ask us for details about providers, processing locations and safeguards applicable to your account.

9. Who the service is for

OncoRegimen is intended for healthcare professionals. The service is not intended for children. If you believe a child has provided personal data to us, please contact us so we can review the situation and delete that data where necessary.

10. Updates and contact

This policy may change as service features and practices evolve. The date at the top of this page indicates the latest update. If a change requires specific notice or new consent, we will provide it before the relevant processing begins.

Contact: the OncoRegimen team.
Email: contact@onregimen.com.
Phone: +212 660 365 580.
Support and requests: oncoregimen.com/contact.