Privacy Policy
This policy explains what information the e-PT app handles, why, how long it is kept, and how to have it deleted. It covers the app itself. It does not cover the proficiency testing server your organisation runs, which is a separate system with its own operator.
1. Who is responsible
The app is developed and published by the Deforay Developers Team, reachable at hello@deforay.com.
e-PT is a client application. When you sign in you supply the address of a proficiency testing server, and the app communicates only with that server. The server runs the open-source e-PT web application and is operated by your proficiency testing programme, national reference laboratory, or the organisation that issued your account — not by us, unless we separately host your instance under a written agreement. The operator of that server is the controller of the data you submit through the app. We run no servers for the app and receive no data from it.
2. Who the app is for
e-PT is intended for laboratory and testing-site staff enrolled in a proficiency testing or external quality assessment scheme. It is not a consumer app and is not directed at children.
Not for patient data. e-PT is designed for proficiency testing panels and control samples. Do not enter patient names, patient identifiers, or any other personally identifiable patient information into the app.
3. Information you provide
- Server address — the host name of the proficiency testing server you connect to.
- Sign-in credentials — the username and password issued to you by your programme. These are sent to your server for authentication; the app does not store your password after sign-in.
- Profile information held on your account, such as first and last name, primary and secondary email addresses, and mobile or telephone number. This is retrieved from and updated on your server.
- Proficiency testing responses — the shipment, panel and result data you enter for each scheme, which is submitted to your server.
All of this goes only to the server you signed in to. Nothing is sent to us or to any third party.
4. Information stored on your device
The following is kept locally on your phone or tablet so the app can work offline and stay signed in:
- An authentication token for your session, and your server address.
- Cached shipment, scheme and result data, so you can enter results without a network connection and sync later.
- Reports you choose to download, saved as files in an
EPT REPORTSfolder in your device storage. - Your app-lock preference, if you enable one.
5. Biometric and app-lock
You may optionally protect the app with a passcode or your device biometrics (fingerprint or face unlock). Biometric verification is performed entirely by the Android operating system. The app never receives, sees, or stores your fingerprint or face data — it is told only whether the device verified you successfully.
6. Permissions the app requests
| Permission | Why |
|---|---|
| Internet and network state | To reach your proficiency testing server and to detect whether you are online before syncing. |
| File storage | To save downloaded reports to the EPT REPORTS folder and open them. |
| Biometrics | Only if you enable biometric unlock for the app. |
The app does not request access to your location, camera, microphone, contacts, call logs or SMS messages, and it does not send notifications.
7. What we do not do
- We do not collect any data from the app. The app contains no analytics, crash-reporting, advertising or push-notification SDK, and no third-party service receives anything from it.
- We do not sell or rent your information, and we hold none to sell.
- We do not share your proficiency testing data with anyone. It goes only to the server you sign in to.
- We do not track you across other apps or websites.
Because the app is open source, you can verify this yourself in the source repository.
8. Data security
Traffic between the app and your server uses HTTPS where your server provides it; the app defaults to https:// when you enter a server address. Because the server is chosen and operated by your organisation, the security of data at rest is governed by that organisation's policies.
9. How long data is kept
| Data | Where | Kept until |
|---|---|---|
| Session token and server address | Your device | You sign out, or uninstall the app. |
| Cached shipments, schemes and results | Your device | Replaced on each sync; removed when you sign out or uninstall the app. |
| App-lock preference | Your device | You uninstall the app. |
Downloaded reports (EPT REPORTS folder) | Your device storage | You delete them. They are ordinary files and are not removed by signing out or uninstalling. |
| Account, profile and submitted results | Your programme's server | Decided by the operator of that server, normally for as long as you are enrolled in the scheme and thereafter according to the programme's own record-keeping rules. Ask your programme administrator for their retention period. |
| Anything held by us | — | Nothing. We receive no data from the app. Email you send to us is kept only as long as needed to answer it. |
10. Deleting your data
On your device. Sign out to clear your session and cached data. Uninstall the app to remove everything it stores. Delete the EPT REPORTS folder from your device storage to remove downloaded reports. No request to anyone is needed; these take effect immediately.
On your programme's server. Your account and submitted results are held by the organisation that operates the server you sign in to, and only that organisation can delete them. To request deletion, correction or a copy of that data, contact your proficiency testing programme administrator — the organisation that issued your login. The server software gives its operator the ability to remove participant accounts and their submissions. We cannot delete this data ourselves, because we do not hold it.
If you do not know who operates your server, email hello@deforay.com with the server address shown on the app's sign-in screen and we will help you identify the operator to contact. We answer within 30 days.
11. Changes to this policy
If this policy changes, the updated version will be published at this address with a new effective date. Material changes will also be noted in the app's release notes on Google Play.
12. Contact
Questions about this policy or about the app: hello@deforay.com.
Questions about your account, your results, or data held by your programme: contact your proficiency testing programme administrator.