Privacy Policy
EM DocBox is built to collect as little as possible. This page explains exactly what happens to data you enter — and why you must never enter patient identifiers.
This is a general template and should be reviewed by a licensed attorney before launch.
Last updated: June 17, 2026
What we collect
EM DocBox is mostly a static site. The reference modules run entirely in your browser. The only data stored about you is kept locally on your own device, in your browser's localStorage:
- Your theme preference (dark or light).
- Recent searches and favorited items, to make the tools faster to use.
This local data never leaves your device, is not transmitted to us, and can be cleared at any time by clearing your browser storage.
The AI features
When you use Evidence Search, the Discharge Planner, or the Lab Analyzer, the text or images you submit are sent to Anthropic's API so that a large language model can generate a response. That request leaves your browser and is processed by Anthropic to produce the output you see.
Do not enter protected health information (PHI) or any patient identifiers. These tools are for de-identified use only. There is no Business Associate Agreement (BAA) in place covering this service. Do not enter names, MRNs, dates of birth, addresses, or any other information that could identify a patient.
Generally, inputs submitted through Anthropic's API are not used to train models, per Anthropic's commercial API terms in effect at the time of use. We do not control Anthropic's practices; review Anthropic's current privacy and usage terms for the authoritative position, as these terms may change.
Analytics
We may use privacy-respecting, cookieless, aggregate analytics (for example, Cloudflare Web Analytics) to understand overall traffic patterns — things like page views and approximate referrer counts — without identifying individual visitors.
- No third-party advertising cookies.
- No cross-site tracking.
- No selling, renting, or trading of your data.
Rate limiting and your IP address
To protect the AI features from abuse, your IP address may be used transiently for rate limiting — to count and throttle requests over short windows. It is used to keep the service available and is not used to build a profile of you or sold to anyone.
Data security
No method of transmission or storage is perfectly secure. While we take reasonable measures to protect the service, you should never rely on it to protect sensitive information — which is exactly why PHI must never be entered in the first place.
Children
EM DocBox is intended for licensed healthcare professionals and is not directed to children. We do not knowingly collect information from anyone under 18.
Changes to this policy
We may update this policy as the service evolves. Material changes will be reflected in the "Last updated" date above.
Contact
Questions about privacy can be sent to privacy@emdocbox.com.