Privacy Policy — MediPulse CMMS

This page explains what data MediPulse CMMS stores and how it is protected. The system manages the maintenance of medical equipment for subscribing healthcare facilities.

1. Data the system stores

• Facility operational data: equipment and locations, work orders, preventive maintenance and calibration, warranties, inventory and purchase orders, and files and photos uploaded by users.
• Staff account data: name, email, phone, job title, permissions, and sign-in and device records.
• QR fault reports: the reporter's name, ward, optional contact number and the problem description.

The system is not intended for patient records or clinical data, and users are asked not to enter them.

2. Each facility's data is kept separate

Each facility's data is kept separate from other facilities on the server and is available only to that facility's users, according to the permissions its administrator sets.

3. Protection

• Passwords are stored as hashes, never as plain text.
• Optional two-step sign-in (a code from a phone app) and a temporary lock after repeated failed sign-ins.
• An audit log of sensitive actions records who did what and when.
• File download links are signed and expire.
• Connections to the system use HTTPS.

4. Sharing

We do not sell facility data or share it for marketing. Hosting and email providers are used only to run the service.

5. Export and deletion requests

A facility can ask for a copy of its data, or for its deletion when the subscription ends, by calling 0793101728 or via WhatsApp.

Last updated: October 2026