Privacy draft

This page records the data practices represented by the prototype and marks the details that need review for a real pilot.

Draft for review. The live demo uses synthetic data only. Production retention, hosting, consent, and access rules are not yet defined.

Data in this demo

The prototype shows a synthetic worker identity, a fictional health facility, anonymized symptom counts, and simulated medicine inventory. Do not enter personal or patient-identifying information.

AI processing

The current demo uses a local mock extraction engine. It does not send the field report to a third-party AI provider.

Voice input

The prototype includes an optional voice input feature that uses the browser's built-in speech recognition service. The browser or its vendor may process audio externally. BUSHO itself does not store audio recordings. Users should not speak names, phone numbers, government identifiers, precise patient details or diagnoses. Manual text reporting remains available at all times.

Data minimization

A future pilot should avoid names, phone numbers, government identifiers, precise patient details, and unnecessary voice recordings. Access should be limited by role and facility.

Future pilot review

Before real use, the project team must confirm the lawful basis for processing, consent and notice requirements, retention periods, security controls, hosting location, incident response, and participant rights.