Privacy Policy

Overview

Trialify is developed and maintained by The Impactree Foundation. We collect only the information described below, do not sell or share it for behavioral advertising, and provide controls to unsubscribe or request deletion. Trialify is a direct-to-consumer research tool, not a healthcare provider, and this policy does not claim that Trialify is a HIPAA-covered entity or a certified HIPAA-compliant service. We voluntarily extend the privacy controls described below to all users.

Health and Identity Protections

• We do not ask for your name, date of birth, medical record number, insurance number, or medical records.
• Your search criteria (cancer type, stage, age group, biological sex, biomarkers) are used only within your browser session and are not stored on our servers, unless you explicitly opt in to email notifications for a saved search.
• Your individual eligibility questionnaire responses remain in your browser. We record only limited counts of patient-entered answers marked "Not sure" or "Ask my doctor," without question text or answer content.
• No account or login is required to use Trialify, and we do not ask for or store identifying information.
• Lab report upload (optional): If you choose to upload a PDF lab report or photo to auto-fill questionnaire fields, all processing happens entirely on your device. The file and its contents are never sent to our servers, to OpenAI, or to any other AI service.
• Location and distance: If you enter a ZIP code, it is converted to an approximate geographic center using the public zippopotam.us API. Trialify records the ZIP code, resolved state, country, and cancer type as a search analytics event. We do not collect GPS or street-level location.

What Is Stored Locally on Your Device

Trialify uses your browser's local storage (not our servers) to save a small amount of data for your convenience: saved trials, saved searches, assessed trial IDs, theme preference, and notification token. All of this data stays on your device. You can clear it at any time by using the "Delete My Data" link in the footer, or by clearing your browser data.

How We Use AI

Trialify uses AI (OpenAI's GPT-4.1-mini) to simplify eligibility questions into plain language, rewrite complex trial titles, and generate optional patient profiles for the per-trial profile picker. We send only publicly available ClinicalTrials.gov text and, for the profile picker, demographic and clinical fields you explicitly entered. Your questionnaire answers, match results, zip code, city, latitude/longitude, and lab report contents are never sent to any AI service.

What Our Server Stores

Our server maintains a cache of publicly available clinical trial data and records pseudonymous usage events. Search events may include cancer type, country, ZIP code, and state. Match events include a public NCT identifier and broad match category. Questionnaire summary events contain counts only, not question text or individual responses. If cookies are accepted, these events may be associated with a random browser ID. The application database does not intentionally store IP addresses.

Email Notifications

If you opt in to trial notifications, we store your email address, frequency, watched trials, and the saved search criteria needed to run alerts. Email addresses are encrypted at rest, while a separate deterministic lookup hash supports account operations. Every notification email includes a one-click unsubscribe link. Unsubscribing stops future alerts; permanent deletion removes your email, preferences, watched items, and related outreach consent.

Optional Feedback Outreach

Trial alerts, one-time trial follow-ups, and general feedback outreach are separate purposes. We add an email to the feedback-outreach list only when you select the optional, unchecked consent box. The outreach record contains the email, consent date, source, policy version, and status, but no browser ID, cancer type, trial, match result, ZIP code, or questionnaire information. You may withdraw this consent at any time.

Cookies & Local Storage

Trialify does not use third-party analytics, advertising cookies, or tracking pixels. We do not use fingerprinting or any other persistent tracking technology. All storage items are first-party only.

Third-Party Services

• Hosting: Replit
• Clinical trial data: ClinicalTrials.gov API (v2)
• Drug information: openFDA Drug Labeling API
• Zip code lookup: zippopotam.us API
• AI Processing: OpenAI GPT-4.1-mini
• Email Delivery: Resend

Your Privacy Rights

You can access, correct, or delete your data at any time. Use the "Delete My Data" button in the footer to remove all locally stored data and any email notification records. Contact us at support@trialify.org for any privacy inquiries.

Contact

For privacy questions or requests, contact us at support@trialify.org. We will respond within a reasonable timeframe.