PRIVACY NOTICE ยท VERSION 2026-08-30
Privacy, in plain language.
This notice describes the current Fynura service, including Google sign-in, privacy-minimized product events, and optional browser voice controls.
What we collect
If you use onboarding, Fynura collects your email address, user-selected country, privacy acknowledgement, timestamps, and an optional stakeholder role. Privacy-minimized events can record a pseudonymous user or session ID, feature, threat, country, role, and event type. Ask Fynura questions are processed to provide answers but full question text is not placed in the general analytics event table.
Why we collect it
To provide Fynura, understand adoption and geographic reach, evaluate usefulness, identify technical problems, and prioritize improvements.
What not to submit
Fynura is not intended to collect patient records, clinical records, personal health information, or identifiable health data. Do not submit identifiable patient information to Ask Fynura.
Cloud processing
The application runs on Google Cloud. Requests and operational metadata may be processed by Cloud Run, Cloud Logging, Vertex AI, and other enabled Google Cloud services as necessary to operate the service. Authoritative source links may take you to external public-health websites.
Optional voice controls
Voice is never required and starts only when you select the microphone control. Fynura does not record or store raw audio. On supported browsers, the browser speech-recognition service processes audio transiently to produce a transcript; in Google Chrome this service may be provided by Google under the browser provider terms. The transcript enters the same evidence-grounded Ask Fynura pipeline as typed text and remains visible on screen. Spoken playback uses the browser speech-synthesis service; Fynura does not send answer text to a separate custom voice backend. Stop, replay, mute, and text-only use remain available. Do not speak identifiable patient or health information.
Advertising and sale
Fynura does not sell personal information or use it for targeted advertising.
Security and retention
Transport uses HTTPS in production and administrative routes fail closed. User profiles, product-session records and minimized events are stored durably in Google Cloud Firestore. Session records include country ISO codes, optional role, entry time, last recorded activity and sign-out time. Access cookies are HttpOnly and Secure in production, with an eight-hour server-enforced access lifetime. Ordinary refresh does not create another session. Sign out revokes the current Fynura session and returns to the landing page; it does not sign you out of Google. Browsers that restore session cookies can restore a session until server expiry. Records are retained until owner-managed deletion; automated retention deletion is not yet configured. Analytics are owner-only and contain no raw questions or audio. No custom passwords are stored.
Your questions and requests
For access, correction, deletion, or privacy questions, contact the Fynura project owner through the public Fynura repository. Automated deletion is not currently implemented.
Responsible use
Fynura does not replace official public-health authorities, clinical judgment, diagnosis, or medical advice. Surveillance data may be provisional, incomplete, delayed, or revised.