DH EMR

Privacy Policy

DH EMR Field and DH EMR Clinic · a project of Damico Health Inc.
Last updated: October 2026

1. Introduction

This Privacy Policy explains how Damico Health Inc. ("we," "us," or "our") handles information in connection with the DH EMR web applications, DH EMR Field and DH EMR Clinic (together, the "Apps"), and this website. The Apps are free tools designed for international medical outreach and global-health programs. They are not intended for use within the United States healthcare system and are not certified Electronic Health Record (EHR) systems.

2. We Do Not Collect Your Patient Data

We do not operate any servers that store the patient information you enter into the Apps, and we cannot see it. The Apps run in your own browser against storage that you control, and this website is a static site that does not collect patient data of any kind.

We never receive your patients' names, dates of birth, demographics, medical histories, diagnoses, lab results, medications, or any other clinical information.

3. Where Your Data Lives

On your device. Records you enter are saved locally in your browser's storage on the device you use. In DH EMR Field they stay on that device unless you sync or back them up.

In your own cloud. If you enable cloud sync in DH EMR Field, or use DH EMR Clinic at all, your records are stored in a Supabase project that you create and control. We do not host it, administer it, or have access to it. You hold the credentials, you choose the region, and you can export or delete the data at any time. Supabase's own terms and privacy policy govern that hosting - see supabase.com/privacy.

Staff accounts (DH EMR Clinic). Clinic staff sign in with an email address and password. Those accounts exist only in the authentication service of your own Supabase project; we never receive them. Invite links and QR codes generated by your administrators contain your project's address and its publishable key, nothing else.

4. What This Website Collects

This website (damicohealth.com) is hosted on GitHub Pages and contains no advertising, no analytics or tracking scripts, and no user accounts. The demos on this site run entirely in your browser with fictional patients and send nothing anywhere. As with any website, the hosting provider may log standard technical request information (such as IP address and browser type) for security and reliability; that is governed by GitHub's privacy statement. We do not place tracking cookies.

5. Your Responsibilities

Because your data stays under your control, you and your organization are responsible for:

  • Obtaining appropriate patient consent before collecting medical data
  • Complying with the data-protection laws of your country of operation
  • Securing the devices that hold patient information
  • Keeping regular backups (the Apps can export a complete backup file)
  • Protecting your Supabase project address and key, and controlling who can use them
  • In DH EMR Clinic, deciding who holds a staff account and which role it has
  • Appropriately retaining and, when required, deleting patient records

6. It's Free - No Payments

DH EMR is free. There are no subscriptions, no per-seat fees, and we do not process any payments to use it.

7. Children's Privacy

The Apps are professional tools operated by trained adults. While the patients documented may be of any age, the Apps are not directed at or used by children.

8. International Data Transfers

If you use a cloud project, you select the region for your own Supabase project, and your data is stored there. You are responsible for ensuring compliance with any cross-border data-transfer laws applicable to your organization.

9. Data Retention and Deletion

  • Data stored locally on a device persists until you delete it, clear the app's storage, or remove the app from that device.
  • Data stored in your Supabase project persists until you delete it. Because the project is entirely yours, you can remove records or delete the whole project at any time from your Supabase dashboard.
  • We cannot delete your data for you, because we do not hold it.

10. Security

Network traffic between the Apps, this website, and Supabase uses HTTPS encryption. Your Supabase project includes database access controls (row-level security) configured by the setup script; in DH EMR Clinic those rules also enforce staff roles. You are responsible for keeping your Supabase credentials, staff accounts and devices secure, and for controlling which devices and people can access your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted to this page with an updated date above. Continued use of the Apps after changes constitutes acceptance of the updated policy.

12. Contact Us

Damico Health Inc.
Email: md@damicohealth.org
Website: damicohealth.org

13. Disclaimers

DH EMR is not a medical device. The Apps are data-entry and record-keeping tools only. All clinical decisions must be made by qualified healthcare professionals. Damico Health Inc. assumes no liability for clinical decisions made using data from the Apps.

The Apps are not HIPAA-compliant and are not intended for use within the United States healthcare system or any jurisdiction requiring certified electronic health record systems. The software is provided free and "as is," without warranty of any kind.

DH EMR is not a certified EHR and is not HIPAA-compliant. It is intended for global-health use outside the US.