Privacy Policy
Last updated 21 October 2026
ECHO is an academic research prototype developed for an undergraduate thesis at the College of Information and Communications Technology, West Visayas State University, Iloilo City, Philippines. It gives screening support only, not a diagnosis. In short: we do not store your photos, health details or results.
What you send
- The retinal (fundus) photo you upload and the camera type you choose.
- Health details, only if you enter them: age, sex, smoking, systolic blood pressure, diabetes, previous heart attack, stroke or angina, and optionally total cholesterol, height and weight.
- We do not ask for your name, contact details or an account. Please do not put names or ID numbers in file names or in the photo itself.
How it is used
Only to analyse that photo and show your result and report. It is not used to train models, not shared with anyone, and not sold.
We do not store your information
- The analysis server deletes your uploaded photo as soon as the analysis finishes.
- Your result, its images and any health details are deleted from the server as soon as your browser has received them, and in any case within 30 minutes.
- The PDF report is created when you ask for it and sent straight to your browser; it is not kept.
- There is no database of users, photos or results.
What stays on your own device
Your browser keeps your latest result for 30 minutes so the results page can show it, then removes it. It also remembers the camera you chose and that you have seen the first-visit notice. You can remove all of this at any time by clearing this site's data in your browser.
Cookies and tracking
ECHO uses no advertising or analytics cookies and no tracking of any kind.
Hosting and technical logs
The website is hosted on Vercel. The analysis runs on a cloud GPU service (Modal) or, during demonstrations, on the research team's computer. Like any web service, these keep standard technical logs, such as the IP address, time and address of each request, for security and reliability. These logs do not contain your photo, health details or results. All connections use encrypted HTTPS.
Your rights
Under the Data Privacy Act of 2012 (Republic Act No. 10173) you may ask about any personal data held about you. Because ECHO keeps nothing after your session, there is no stored data to access, correct or delete. You may stop at any point; closing the page ends the session.
Who should use ECHO
ECHO is intended for adults. The optional cardiovascular risk chart applies to ages 40 to 74.
Changes and contact
We may update this policy; the date at the top shows the latest version. Questions can be addressed to the ECHO research team, College of Information and Communications Technology, West Visayas State University, Luna St., La Paz, Iloilo City 5000, Philippines. See also the Terms of Service.