✓Guest mode: no data leaves your device. Without an account, all task data is stored locally in your browser only. Nothing is transmitted to any server.
✓Signed-in mode: tasks sync via secure cloud storage. When signed in with an NHS account, your tasks are encrypted in transit and stored on Google Firebase (EU-West) to enable cross-device sync. Sign-up is restricted to @nhs.net addresses only.
✓Team sessions use temporary shared cloud storage. When you join a team session, job descriptions and patient identifiers are stored on Firebase (EU-West) for the duration of the session only. Data is automatically deleted after 12 hours.
✓No patient identifiable information required. Use only bed numbers, ward locations, or partial identifiers — never full names, dates of birth, or NHS numbers. This is especially important in team sessions and signed-in mode where data may be stored in the cloud.
✓Automatic data wipe. Personal tasks clear after 16 hours. Team session data clears after 12 hours. Signing out removes cloud sync but does not delete stored cloud data — delete your account to remove all data permanently.
✓Access controls. Your synced tasks are protected by Firebase authentication and are only accessible to your account. Team sessions are access-controlled by a 6-character code shared only with your ward team.