Privacy Policy
Last updated: June 6, 2026
Interim policy — beta
Brecha Networks is in invite-only beta. This plain-language policy describes how we handle data today and is being reviewed by legal counsel; it may change before public launch. This page is not legal advice.
1. Who we are
Brecha Networks is a coordination platform for healthcare professionals working on cross-jurisdictional access barriers. For privacy questions, contact us at privacy@brechanetworks.com.
2. What we collect
- Account data: your email address, a username (which may be a pseudonym), and your self-declared role and (optional) specialty.
- Content you post: barriers, comments, working-group activity, and any contact details you choose to add.
- Connections: who you follow, your interest in barriers, and connection requests you send or accept.
- Technical data: standard server logs (IP address, browser type, timestamps) kept briefly for security and reliability, and a session cookie to keep you signed in.
We deliberately do not collect protected health information (PHI), and the platform is not for personal medical data. We don't ask for a precise location — regions are state/province level only.
3. How we use it
To run the platform: authenticate you, show your contributions, let the right professionals find and contact each other, send service emails (like your sign-in code and notifications), moderate content, and keep the service secure. We do not sell your data or use it for third-party advertising.
4. Legal bases (GDPR)
For users in the EU/UK, we process data to perform our agreement with you (providing the service), on the basis of your consent (which you can withdraw), and for our legitimate interests in keeping the platform secure and functional.
5. Service providers we share with
We use a small set of trusted providers to operate the service:
- Hosting and database (our infrastructure provider);
- Email delivery (for sign-in codes and notifications);
- DNS and network security;
- Maps: the barrier map loads Google Maps, so map requests are subject to Google's privacy policy.
These providers process data on our behalf to deliver the service, not for their own purposes.
6. Your rights & controls
From your Account page you can export your data (a download of your account, barriers, comments, and connections) and delete your account. Deletion anonymizes your account — your identifying details are removed and your account is deactivated — while the barriers and comments you contributed remain (de-identified) so ongoing discussions others rely on aren't erased. Depending on where you live, you may also have rights to access, correct, or object to certain processing; contact us to exercise them.
7. Retention
We keep account and content data while your account is active. Server logs are kept only briefly. When you delete your account, identifying data is removed promptly as described above.
8. International transfers
The platform is operated from the United States, so if you use it from elsewhere your data is processed in the US. We rely on appropriate safeguards for such transfers where required.
9. Security
We use HTTPS everywhere, a strict content-security policy, encrypted credentials, and least-exposure database access. No system is perfectly secure, but we take reasonable measures to protect your data.
10. Children
Brecha Networks is for professionals and is not directed to anyone under 18. We don't knowingly collect data from children.
11. Changes
We may update this policy as the platform develops and after counsel review. We'll change the “last updated” date, and significant changes will be flagged.
This interim policy will be replaced by a counsel-reviewed version before public launch.