Privacy policy

Last updated: 7 November 2026

POCUS Log is a personal logbook for point-of-care ultrasound training. It is designed so that we never receive or hold your data. This policy explains what the app stores, where, and your choices.

Who we are

POCUS Log is developed by Dr Moustafa Elgohary, an emergency medicine doctor in the United Kingdom. Contact: [email protected].

The short version

• Your logbook is private. It stays on your device and, if you choose, in your own iCloud Drive or Google Drive.
• Only if you give a supervisor access do we keep a view-only copy of your logbook for them, and we delete it when you remove them.
• If you join Groups, we store only what you choose to share there (the scans you post, your comments and likes) plus a basic profile.
• No advertising, no analytics or tracking, and we never sell data.

What the app stores

When you use POCUS Log, the following is saved on your device: your name (as it should appear on your logbook), the scans you log (scan type, date, optional clinical question, finding, diagnosis, supervision, entrustment level, reflection), images you add, any supervisor sign-off details (supervisor name, role, entrustment level and comment), and your app settings.

iCloud Drive

If you choose “Save to iCloud”, the app copies your logbook, an Excel version of it and your images to a POCUS Log folder in your own iCloud Drive. This uses Apple's iCloud service under your Apple Account; Apple's privacy policy applies to it. We cannot access your iCloud Drive. You can choose “Keep on this phone only” instead, and change this in Settings at any time.

Google Drive

If you choose “Save to Google Drive”, you sign in with Google inside the app and grant POCUS Log permission to create and manage only the files it creates in your Google Drive (Google's drive.file permission). The app then keeps your logbook, an Excel version of it and your images in a “POCUS Log” folder in your Drive. POCUS Log cannot see any other files in your Drive. Your Google sign-in is handled by Google and stored on your device; we never receive your Google password, account details or files. You can remove the app's access at any time in your Google Account (Security › Third-party apps & services). POCUS Log's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Groups and sharing

Groups are optional. If you use them (or Supervisor access, below), you sign in with Apple or Google. We receive a private account identifier from Apple or Google (and, with Google or if you allow it with Apple, your name). We do not receive your password or email address for this purpose.

We store, on servers run by Cloudflare, Inc.:

• Your profile: the name, role and country you enter, and when you accepted the community rules.
• What you share: the images and captions you choose to post to a group, your comments and likes, and the groups you create or join.
• Safety records: reports you make about posts or comments, and people you block.

Shared posts are visible to members of the group you post to. Posts in an open group can be seen by anyone signed in to POCUS Log Groups, anywhere in the world. Posts in a private group are visible only to people who join with its invite code.

We use this information only to run Groups: to show posts, comments and likes, to keep the community safe (for example hiding posts that are reported several times) and to prevent abuse. Cloudflare may process data in countries outside the UK, under its data protection terms.

Never share patient-identifiable information. You must check every image and caption before sharing. Each share asks you to confirm this.

Deleting: you can delete any post or comment you made at any time. Settings › POCUS Log account › Delete account permanently deletes your profile, posts, images, comments and likes, and your supervisor access with its copy of your logbook, from our servers. Your own logbook on your device and in your cloud is not affected.

Uploading from a computer

If you add scans at pocuslog.net/app, the images and details you enter are stored on Cloudflare's servers only until your phone collects them. Your phone then adds them to your logbook and they are deleted from our servers straight away. Anything not collected is deleted automatically after 30 days. You can also delete waiting scans yourself on the website.

Supervisor access

Supervisor access is optional. If you add a supervisor's email address, we store on Cloudflare's servers:

• the email addresses you add, and when each supervisor last opened your logbook;
• a view-only copy of your logbook (scan type, date, clinical question, finding, diagnosis, supervision, entrustment levels, reflection and sign-offs) and smaller copies of the images for your most recent scans;
• comments your supervisors write, with the name they enter.

Each supervisor gets a private link that only works for them, which you send from your own email app. Anyone with the link can view your logbook and comment, so it should not be forwarded. The copy updates automatically when you log or edit scans. When you remove a supervisor, their link stops working at once; when you remove your last supervisor, the copy and its images are deleted. We do not send emails to your supervisors or use their address for anything else.

Camera, photos and notifications

The app asks for camera and photo library access only so you can add ultrasound images to your logbook. Images you add are reduced in size and saved in the app. If you turn on the weekly reminder, it is scheduled on your device; no data is sent anywhere.

Sharing and exports

Nothing else leaves your device unless you choose to share it, for example by exporting your logbook to Excel and sending it to a supervisor or portfolio. Once you send a file to someone, their handling of it is outside our control.

Patient information

POCUS Log is a training logbook, not a medical record. You must not enter patient-identifiable information (such as names, dates of birth, hospital or NHS numbers) or images showing identifiers. The app asks you to confirm this each time you log a scan. You are responsible for following your employer's and regulator's rules on confidentiality and data protection.

Children

POCUS Log is intended for healthcare professionals and students aged 18 or over, and is not directed at children.

Deleting your data

You can delete individual scans in the app. Deleting the app removes the data stored on your device. To remove data from iCloud, delete the POCUS Log folder in the Files app (iCloud Drive) or manage it in your iPhone's iCloud settings. To remove data from Google Drive, delete the POCUS Log folder in your Drive.

Your rights

Your logbook stays under your control on your device, in your iCloud and in your Google Drive; we cannot access it there. For Groups and Supervisor access, you can see, change and delete your profile, everything you shared and who has access in the app, or email us to ask for a copy or deletion. If you have a question or concern, contact us at [email protected]. If you are in the UK you can also contact the Information Commissioner's Office (ico.org.uk).

Changes

If future versions change how data is handled, we will update this policy and the date above before those features are released.