Privacy & safety.

Updated 5 November 2026. This notice explains how Ayushh handles accounts, private records, contributions and your choices.

What is stored

Email and account details support sign-in. You choose whether to store private medication notes, notebook entries, reading records, examinations or educational quiz answers. Guest quiz answers stay in browser memory. Necessary session cookies authenticate your account. Theme and language preferences use local storage or a preference cookie. There is no standard analytics tracking.

Who can see it

Private records are queried by owner identity at the server. CMS roles do not grant access. An explicitly selected verified recipient can read only an item shared with that account, until expiry or revocation. Attachments are not included in shares.

Local storage and protection

SQLite is not encrypted at rest. Private attachments use AES-256-GCM with a separately configured key, outside public paths. A machine owner with filesystem access can read the database. Backups and the key must be protected separately; losing the attachment key prevents recovery.

Email choices

Account messages are separate from marketing. Educational updates require confirmation and your chosen topics. You can unsubscribe at any time. Email features are available when a delivery provider is configured.

Your controls

Account & Privacy lets you export records, change password/email, revoke sessions and delete your account. Delete removes private records, files, shares and sessions, and suppresses newsletters. Minimal pseudonymous audit IDs remain to document security events. Download attachments separately before deletion.

Medical concerns

This site is educational. It is not a clinical service or a medical device. Do not change medicines based on its content. For a medical emergency, seek immediate local medical help.