Your location is fuzzed
Exact GPS never leaves your device. Before any report is saved, we randomize the coordinates by ~300 metres and snap them to a neighbourhood-level hex grid (H3 resolution 8). Nobody — including us — can trace a pin back to your door.
Your identity is not attached
Usernames and emails are for account management only. When other users see a cluster or a cluster’s reports, they see anonymized cards — no username, no avatar, no handle.
We publish insights, not data
What's shared publicly is aggregated: “6 people reporting wheezing near here”, “average severity 3.2”, “top remedies were rest and hydration”. The individual rows behind those numbers stay private, protected by row-level security in our database.
k-anonymity on every cluster
A cluster isn't surfaced until at least three distinct reporters show up in the same hex. If you're the only one reporting in your area, nothing about you appears on anyone else’s map.
You are in control
Under MHMDA (Washington), CCPA (California) and GDPR (EU) you can export everything we hold about you or permanently delete your account and every associated report. Both are self-serve from Profile.