Privacy policy for voXel
Effective on the day voXel is first released on the App Store.
Summary
voXel collects nothing and sends nothing. It has no account, server, analytics or advertising. Your images stay on your iPad.
What voXel collects
Nothing. There is no account, no analytics or crash-reporting service, no advertising identifier, and no code from any other company in the app.
Your images
Studies you import, and the notes, lecture recordings and images you save, are stored inside voXel on your iPad, protected by iOS, until you delete them. They are never uploaded: voXel has no cloud, sync or backup service.
Data leaves the app only when you choose:
- The share sheet. An export (PNG, JPEG, PDF, GIF, MP4, STL, OBJ, 3MF, USDZ or DICOM) goes wherever you send it. voXel adds no patient details to exported pictures or file names. The one exception is a 3D model exported as DICOM: it copies the patient's name, IDs and study details from the scan, as DICOM needs, so it files with the study. Some images carry the name in the pixels themselves, such as ultrasound and screen captures, so check one before you share it. A 3D surface of a head can still show a face.
- Send from a desktop. A local web server, off until you open it, protected by a six-digit code, limited to your local network, and encrypted. The certificate is made by your iPad, so your browser warns before it connects; the fingerprint on screen lets you check it.
- The camera. Used only by View in AR, to place a model in your room. Nothing is recorded or stored.
- The microphone. Used only when you tap the mic in a note, to record a lecture. A red dot and the time show while it records. The recording is saved inside voXel on your iPad and leaves it only if you export it.
- Speech recognition. Transcribe (voXel Pro) turns a saved recording into text using Apple's speech recognition on your iPad. The audio and the text are not sent anywhere. iOS may download Apple's speech model the first time; that download carries none of your audio.
System features declared to Apple
- Preferences storage, for your own settings: shortcuts, the magnifier, whether patient details are hidden, and whether you have seen the welcome screen.
- Free disk space, shown on the Diagnostics screen.
Both stay on your iPad.
Problem reports
A report lists the app version, the device model and any failed checks. It has no file names and no patient details, apart from anything you type into it, so please don't type any. If voXel has crashed, it also says where: iOS hands the app its own crash reports, and voXel keeps the part that names its own code. That stays on your iPad. A report is sent only if you send it, and I use it only to fix the problem.
Apple
If you share analytics with developers in iOS Settings, Apple may show me anonymous totals such as downloads, countries and crashes. You can turn this off under Settings, Privacy & Security, Analytics & Improvements. Purchases are handled by Apple; I never see your name or payment details.
This website
voxeldicom.com is served by Cloudflare, which receives your IP address. Cloudflare Web Analytics counts visits without cookies and shows me only totals. None of this involves the app.
Mail to support@voxeldicom.com is forwarded by Cloudflare to a Google-hosted inbox, and replies are sent through Resend. Each handles a message only to deliver or store it. Please don't attach medical images.
Children
voXel is for clinicians, trainees and students, not for children, and it collects nothing from anyone.
Your rights
Under Malaysia's PDPA, the EU and UK GDPR and similar laws, you can ask what personal data a developer holds about you. I hold no patient data: your studies never reach me. If you email support, I keep your address and your messages in that inbox to answer you, and I will delete them if you ask. Deleting a study in voXel removes it from your iPad. Deleting the app removes everything.
Your responsibilities
Medical images are patient data. Your employer's policies and your local law decide whether you may keep them on a personal iPad, and voXel cannot grant that permission. Hide patient details before you show a study to others.
Changes
A new version of this policy will appear here with a new date. If voXel ever collected anything, this page and the app would say so before it happened.