Consumer Health Data Privacy Policy

Version 1. Effective 4 October 2026. Last updated: October 2026.

1. Who we are

rAidiology, made by LunarWerx LLC (LunarWerx Studios). Contact: [email protected]. This is version 1 of this policy, effective 4 October 2026, last updated October 2026.

2. What we collect and why

Only if you choose to donate a scan, we collect:

• a de-identified medical scan you chose to send: the pictures and a few technical details (body part, pixel size, slice positions, scanner make and model);
• your sex and your age in years;
• a consent record: the terms version, a hash of the panel's text, the month and year, a code made from your donation number, and the list of series and tags sent.

We use it to train and test rAidiology's scan-reading models, which are in products that may be sold. Nothing else.

3. Where it comes from

Only from you, through your own browser.

4. What we share and with whom

No one but Connections Global LLC (a company with the same owner as rAidiology), which stores the encrypted files and runs the upload service for us on Amazon Web Services, under a written processing agreement that lets it use them for nothing else, and has no key to the files. Nevada's law counts even that as sharing, so the donation panel asks for it in a box of its own. Cloudflare, Inc. serves these pages and receives no donation.

5. No sale, no advertising, no language models

• We sell no personal data, to anyone, and so have no categories of it sold or buyers to list.
• We process none for targeted advertising.
• We profile no one.
• We do not collect, use or sell personal data to train large language models. Donated scans train only models that read medical images.

6. How it is processed

Kept locked in storage, and unlocked only on the owner's own computer to train and test models. Unlocked copies are never uploaded anywhere and never shown to an AI assistant or outside service. Access is limited to the people who train the models, each under a duty of confidentiality.

7. Tracking

No third party collects anything over time or across sites from our pages: no analytics, no advertising, no trackers.

8. Your rights and how to use them

No account is needed. With your donation number, at raidiology.pages.dev/donation, you can:

• confirm we hold your scan, and open or save a copy of it in a usable format (the DICOM files as sent);
• save a copy of the permission you gave;
• delete it, which also withdraws your consent;
• get a list of anyone we shared it with (always only Connections Global LLC and Amazon Web Services, as above).

Without the number, open the same scan on that page; it makes a code from the pictures to send us, and we search the locked donations for it. Or write to [email protected].

• Timing: we answer within 45 days (once extendable by 45 with notice) and delete within 30. Requests are free, twice a year or more.
• Email requests: the thread is deleted once the request is closed. We never send a scan by email.
• Reviewing and changing your data: you review it by opening the copy above. There is no process to change a donated scan, since it is what the hospital made; to correct anything, delete it and, if you like, donate again.

9. Appeals

If we refuse a request, reply "appeal"; we answer in writing within 45 days, and if we still refuse, we give the attorney general's complaint page (Washington: atg.wa.gov; Nevada: ag.nv.gov; Connecticut: portal.ct.gov/ag; any other state: its attorney general).

10. Changes

A new version is posted here with its date. We cannot tell donors one by one, since we hold no way to reach them. A change in how donated scans are used applies only to scans donated after it; scans already given stay under the terms they were given under.

11. Sale of the business

If rAidiology changes hands, donated scans go only to a buyer who keeps these terms.

12. Never re-identified

We commit publicly to process donated scans only in de-identified form and never to try to identify anyone; anyone we ever pass them to (today, no one) must promise the same.

13. Texas notice

The only electronic disclosure of donated health information is to Connections Global LLC for storage on Amazon Web Services, under the separate permission each donor gives in the donation panel's third box.