Data handling
Last updated 17 October 2026.
Illustrative, written for an assessment. The retention periods are what I set for a demonstration, not a promise for a live clinic.
Demo patients are not real
The patients and bookings you see when this clinic is reviewed (names, phone numbers, emails ending in example.com, appointments and cancellation reasons) are AI-generated, fictional and Nairobi-local. They were created to make the clinic reviewable and describe no real person.
What is collected
| Data | Why | Where | Kept for |
|---|---|---|---|
| Name | To identify who the appointment is for | Neon database (aws-us-east-1) | Until you ask for deletion, or the demo data is reset |
| Phone number (public API only) | Not collected by this site; the public API accepts one | Neon database (aws-us-east-1) | Same as above |
| Email address | Matching your sign-in to your patient record, and appointment emails | Neon database. Appointment emails are sent through Resend | Same as above. Resend keeps sent-mail records for 30 days on the free plan |
| Google profile (name, email, picture) | Sign-in; the picture is also shown to the clinic's owner and admins next to your appointments | Neon database; session cookie in your browser | Until you ask for deletion; the cookie ends with your session |
| Appointment times and doctor | To show and manage your booking | Neon database (aws-us-east-1) | Same as above |
| Cancellation reason | So the clinic knows why a slot opened | Neon database (aws-us-east-1) | Same as above |
| Request logs (no patient IDs) | To find and fix faults | Cloud Run in us-east4 and Vercel | Platform defaults, which I do not change |
Where it is hosted
The site runs on Vercel, the booking service on Google Cloud Run in us-east4, and the database on Neon in aws-us-east-1. Appointment emails are sent through Resend. The reasons for the region are in the hosting decision.
Kenya Data Protection Act, 2019
This demonstration uses synthetic data only, and you should not enter real health information. Hosting in the United States was chosen for cost and latency, and it would need a data residency review under the Act before any real patient data was stored. I have not done that review, and nothing here is legal advice.
Deletion requests
To have your data deleted, write to developer.ericgitangu@gmail.com from the address on the account, or use the contact details on developer.ericgitangu.com. The general privacy notice is on the privacy page.