Privacy Policy — PTTM ApplicationLast updated: 21 June 2026 The PTTM Application (“Application”) is an internal management tool used by healthcare staff of the Department of Cardiovascular Surgery to monitor workflows and compile statistics on the department’s professional activities. The Application is not intended for the public and access is granted only to users approved by the administrator.The Application minimizes the storage of patient-identifying information. The Application does not store patients’ full names, hospital medical record numbers, personal identification numbers, addresses, or phone numbers. Case-identifying information is recorded only in a minimal form, including initials and an internal tracking code created by staff, for the purpose of distinguishing cases within the department.Intended users: The Application is intended only for authorized internal healthcare staff. Users must register with an approved account and be assigned a role by the administrator before using the Application. The Application is not directed at, and does not collect data from, children. Data stored: The Application stores: user account information of healthcare staff, including full name, work email address, and assigned role; contact information of the staff member in charge, including the phone number of the healthcare staff member responsible for the case, for internal communication purposes. This is the phone number of the staff member, not that of the patient or the patient’s family member. Case management information is stored in a limited-identification form, including initials, for example “N.V.A.”, an internal tracking code created by staff, which is not the hospital medical record number, and professional information used for treatment and statistical purposes, including diagnosis, type of surgery, treatment status, year of birth, bed number, duty schedule, and statistical data. The Application does not store patients’ full names, hospital medical record numbers, personal identification numbers, citizen identity card or identity card numbers, addresses, or phone numbers.Purpose of data use: Data are used only for the purpose of managing the department’s internal professional activities, including monitoring treatment workflows, managing hospital beds, duty schedules, statistics, and internal communication among staff members. Data are not used for advertising, and are not sold or shared with third parties for commercial purposes.Data storage and security: Data are stored on the cloud server infrastructure of the database service provider, Supabase, and are encrypted during transmission by HTTPS and during storage. Data access is controlled through account authentication, role-based authorization, and database-level security rules, including Row Level Security. Only accounts approved by the administrator may access the data, and each role may access only the scope of data permitted for that role.Data sharing: The Application does not share data with third parties, except for the technical infrastructure provider, namely the database service provider, for the purpose of operating the Application. Data are not transferred for advertising or commercial purposes.User rights: Users have the right to request access to, correction of, or deletion of their account information. Any requests related to data should be sent to the email address below.Data retention and deletion: Data are retained for as long as the Application is used for internal management purposes. When an account is deactivated or when there is a valid request, related data may be deleted in accordance with the administrative procedure.Changes to this policy: This policy may be updated. The new version will be posted at the same address together with the updated date.Contact: For any questions regarding this Privacy Policy or data, or for requests to delete data or the account of a PTTM app user, please contact:
Email: phanquangthuan.md@gmail.com