PRIVACY POLICY · 3 OCTOBER 2026
Privacy, by design.
Baker Medical Guide provides DrBaker Guideline. Contact us at bakermedical1@gmail.com.
Website accounts
When Manager creates or allows a regular account, we store its username, any provided email, display name, Manager approval and a salted password hash. Your password is never stored as plain text. We store your display name, access role, membership status, account terms version, account dates, attachment-read counts and favourite guideline identifiers to provide your workspace. Username-and-password sign-in is handled by this website. Owner verification uses an identity provider, which may supply an account identifier, email and optional name for setup under its own privacy terms.
Patient history and reports
Patient history, diagnosis and service inputs, uploaded files, extracted text and evidence results stay in the browser tab. The website does not send these case inputs to our account service, a cloud model, a payment provider or an analytics service. Closing or clearing the workspace removes its case state. Any report or text you download is then controlled by you. Use only information you are authorized to handle, and avoid unnecessary identifying details.
Shared guidelines and manager activity
Only the owner’s Manager account can update the shared guideline library and manage member access. We store those updates and a limited activity record of the action, target and time. Manager can see membership details and saved guideline changes; Manager cannot retrieve patient history or uploaded reports from the account service.
Payments
Launch access is free and no payment information is collected. If paid membership is enabled later, payment details will be handled by the named payment provider on its hosted pages. Our account service will retain only customer and subscription identifiers, status and billing dates required to manage access. The checkout will show the price, renewal frequency and applicable payment terms before you agree.
Cookies and infrastructure
Authentication uses essential sign-in cookies. Manager protection stores a salted password hash, failed-attempt counters and short-lived access sessions and limited sign-in attempt counters; the password itself is not stored. Your browser may store a display preference such as theme. We do not use advertising trackers or analytics cookies. Hosting and authentication providers process requests to deliver the website and may maintain operational logs under their own terms. Internet requests necessarily involve connection information such as IP address.
Retention and your choices
Your profile, credentials, attachment-read counts and favourites remain until you delete your DrBaker account. Expired website sessions and sign-in attempt records are periodically removed. Account deletion removes that personal account data and de-identifies the manager identifier in activity entries. Shared business guideline content remains in the library. Any active paid subscription must first be stopped successfully so future billing is not left running. A payment provider may retain its own records under its legal obligations. We do not promise deletion of provider records we do not control.
Managers with unlocked access can export data. You can update your display name, remove favourites, cancel an active subscription and delete your DrBaker account from Account settings. Account deletion applies to your DrBaker profile; it does not close accounts held with other providers. For access, correction, privacy concerns or other applicable data rights, contact our support email.
Chrome extension privacy
The offline extension has a separate policy describing its local storage and report processing. Read the DrBaker Chrome extension privacy policy.
Policy updates
Material changes will be reflected on this page with an updated date. The current launch version uses free account access and no advertising or analytics services.