EchoProb is a web-based clinical decision support (CDS) tool operated by EchoProb, LLC. EchoProb accepts numeric echocardiographic measurements and returns probability-weighted grading assessments based on published guidelines. EchoProb is offered as clinical decision support software rather than as a medical device. It has not been submitted to, cleared by, or reviewed by the FDA.
| Data Type | Examples | Storage | Retention |
|---|---|---|---|
| Account data | Email, name, credential, institution | Supabase (PostgreSQL, AWS us-east-1) | Until account deletion |
| Echocardiographic measurements, at the moment of grading | EROA, VC, RegVol, LVEF, TAPSE | The grading call itself is stateless. Values are processed in memory, returned to your browser, and discarded. They are not written to a database by that call. | None (stateless) |
| Study snapshots | Saved module results and numeric measurements, de-identified | Your device (browser localStorage) and Supabase (account-scoped, RLS-protected) so your studies sync across devices. A client-side scrub redacts common PHI patterns before any sync. | Until account deletion |
| Institutional case reads | The de-identified parameter set and grade a reader submits for a case session, on institutional accounts only | Supabase, organization-scoped. A server-side filter strips identifier-shaped values before the record is written. | Until the organization or account is deleted |
| Quiz Mode attempts | Submitted grade, score, difficulty | Supabase | Until account deletion |
| API audit logs | Endpoint, user ID, module, IP, status | Supabase | See section 10 |
| Billing data | Subscription status, trial dates | Supabase (status only); Stripe (payment details) | Per Stripe retention policy |
| Analytics | Anonymous page views, feature events | Plausible Analytics (EU-hosted, cookieless) | Per Plausible retention policy |
You are instructed at first login and at study creation to never enter protected health information. Use de-identified case labels (e.g., "Case A" or "EP-042"), not patient names or MRNs.
When you submit measurements, your browser sends them to our serverless grading function. The function processes the values in memory, computes a probability distribution, returns the results to your browser, and discards the input values. The grading call itself stores nothing: it writes no measurement value to any database. The audit log for that call records who called it, when, and which module, and never the values.
Measurements do reach our servers in two other places, and both are things you choose to do:
Everything above concerns what reaches our servers. One feature also shows some of it to other people, so it is worth stating plainly and in full.
As of August 9, 2026, Quiz Mode and its leaderboard are switched off across the whole product and no longer appear anywhere in the interface. Nothing you did in Quiz Mode was deleted, and nothing new is being recorded. The rest of this section describes how the feature behaves when it is on, because it may return and because your existing history is still stored under your account until you delete it.
When it is on, the leaderboard is on by default. You are included unless you turn it off.
Once you are included, any other signed-in EchoProb user can see your display name, your credential, your institution, and your Quiz Mode performance. That performance is not only the few figures the leaderboard paints on screen. Read through our data interface, it also includes, for each module you have attempted: your attempts, exact matches, matches within one grade, misses, points, average case difficulty, current and best streak, and when you last attempted a case. Rank is computed on points rather than on accuracy.
Who "any other signed-in user" means. Not the public, and not search engines. A signed-out visitor can reach none of it. But it is not limited to your colleagues or your institution either. It is every EchoProb account holder, including anyone on a free trial. Treat it as visible to our whole user base rather than to a team.
You do not appear until you have made at least 5 Quiz Mode attempts, or at least 3 in a module for the per-module board. Attempts below that threshold are stored against your account but are not shown to anyone else.
Turning it off. The toggle is in Profile. Switching it off withdraws you from the leaderboard and from the per-module figures described above, and that is enforced in the database rather than only in the page, so it is not something a different screen can bypass. It cannot reach copies already made: anything another user has already seen, screenshotted or exported is outside our control, as is any page they still have open.
Grading you do outside Quiz Mode is not part of this at all. Your saved studies, your reports and your institutional case reads are never shown on the leaderboard or to other users.
EchoProb uses the following cookies and similar technologies:
We do not use advertising cookies, tracking pixels, or third-party remarketing.
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication | Account data, quiz attempts, audit logs |
| Netlify | Hosting, serverless functions | HTTP requests (no measurement data persisted) |
| Stripe | Payment processing | Email, subscription status |
| Sentry | Error monitoring | Error stack traces (no PII or measurements) |
| Resend | Transactional email | Email address (welcome email) |
| Plausible Analytics | Usage analytics (cookieless) | Anonymous page views, feature events |
EchoProb is not currently HIPAA-compliant and does not process, store, or transmit PHI. For institutional deployments requiring HIPAA compliance, a Business Associate Agreement (BAA) is planned for Q4 2026. The architecture is built toward it: grading is stateless, stored measurements are de-identified and access is row-level scoped, audit logging is in place, and all data is encrypted in transit. No BAA is executable today.
You may:
When you delete your account, we permanently remove your profile, quiz history, learning stats, referral records, synced study snapshots, and audit log entries. Copies held in your own browser's local storage are outside our reach; clear your browser data to remove those.
| Data | Retention | Deletion |
|---|---|---|
| Account data | Until deletion or 2 years of inactivity | Account deletion (Profile page or email request) |
| Study snapshots | Until you delete the study or your account | Delete in-app, delete your account, or clear browser data for the local copy |
| Institutional case reads | Until the organization or account is deleted | Cascade deleted with the organization or account |
| Quiz attempts | Until account deletion | Cascade deleted with account |
| API audit logs | Target is 90 days. Automated purge is not yet in place, so entries older than 90 days may still exist. | Cascade deleted with account today. Automated 90-day purge is planned. |
| Rate limit records | 5 minutes | Auto-purged |
We would rather state the audit-log position plainly than imply an automated purge that is not running yet. Deleting your account removes your audit entries immediately, regardless of their age.
EchoProb is hosted in the United States (AWS us-east-1 via Supabase, Netlify CDN). If you access EchoProb from outside the US, your data may be transferred to and processed in the US. By using EchoProb, you consent to this transfer.
For EU/EEA users: we process data under legitimate interest (providing the service you requested) for essential functions, and under consent for analytics. You may exercise your GDPR rights by deleting your account in the app or contacting us.
If EchoProb, LLC is involved in a merger, an acquisition, a corporate reorganization, or a sale of all or substantially all of its assets, the data described in this policy may transfer to the successor as part of that transaction.
We will tell you by email or in-app notice before your data comes under a different privacy policy. The successor is bound by this policy as it stands at the time of the transfer until it gives you that notice. You may delete your account at any point, including after receiving it.
We do not sell personal data. This section does not permit the sale of your information on its own, separate from a transfer of the business.
EchoProb is a professional clinical tool. It is not intended for users under 18.
We will update this policy as features change (particularly for institutional licensing, HIPAA BAA, and international deployments). Material changes will be communicated via email or in-app notice. The effective date at the top of this page will always reflect the latest version.
Questions about this policy: amalashock@gmail.com