Privacy in plain language

No account. No transcript database. Still, share carefully.

This prototype minimizes sensitive data. It is not a confidential clinical service, so do not share identifying or medical details.

Current preview settings

Live AI is off. Chat text is not sent to an AI provider in this scripted preview. Aggregate analytics and feedback collection are off.

What Bridge asks you not to share

Avoid names, student numbers, addresses, diagnoses, medication lists, insurance information, medical records, or details that identify another person.

What happens to conversation text

Your current messages stay in this browser tab while you chat. A bounded recent history is sent to the Bridge server to produce a response. In live mode it is sent to OpenAI with API storage disabled using store: false. Bridge does not write it to application logs, analytics, or a transcript database.

What aggregate analytics may contain

Analytics are disabled by default. If an approved study enables them, they can contain counts such as sessions, approximate turn count, quick-start category, resource clicks, coping selections, anonymous helpful/not-helpful feedback, technical failures, and safety-routing totals—never the words you typed.

Retention

  • Conversation in this tab: until refresh, close, or End and clear.
  • Rate-limit counters: temporary server memory for the limit window.
  • Aggregate counts: process memory only when deliberately enabled.
  • Fictional eval data and generated reports: retained with the research code.

Third parties

Live mode uses OpenAI as the only conversation-processing third party. The deployed hosting provider will also process ordinary web requests. Bridge uses no advertising, tracking pixels, session replay, social login, or external font/image hosts.