Privacy

Short version: the software you download from this site never sends anything anywhere. The site itself keeps one thing about you, your email address, and only because a licence has to be issued to someone.

The corad application

corad runs entirely on the computer you install it on. It reads the screen or a file you point it at, runs a model that ships inside the download, and shows the result in a window. It has no sign-in of its own, no telemetry, no update check and no remote model. It does not write images to disk unless you run a command that asks it to.

Beyond simply having no code that uses the network, the application installs a process-level guard at start-up that refuses every outbound connection and DNS lookup to any address other than the local machine. You can prove this on your own computer by running Corad-Verify.cmd (Windows) or python -m corad verify: it attempts a TCP connection, a UDP packet, a DNS lookup and an HTTP fetch and reports each one blocked.

The licence file the app needs is a signed text file that you download from this site and place on your computer. It contains your email address, an account identifier, an expiry date and the key that unlocks the model. The app checks its signature with a built-in public key and never contacts this site or anyone else to do so. If you want the app to stop knowing your email, delete the file.

Accounts

A free account exists for one reason: to issue you the licence file. Signing in is by a link emailed to you; there is no password to store.

What we keep. Your email address, the date the account was created, the plan attached to it, and a record of each licence file issued: an identifier, when it was issued, when it expires and which model bundles it unlocks. Nothing else. No name, no institution, no payment details, and nothing about how or whether you use the app.

Where it lives. Sign-in and the account records are handled by Supabase, which sends the sign-in email and stores the account data on our behalf. Supabase keeps its own short-lived logs of sign-in attempts, which include the IP address the request came from, as any authentication service does. The licence signing key stays on our server and is never shared with Supabase or anyone else.

Browser storage. After you sign in, your browser keeps a session token so the account page can issue licences without emailing you again. It is stored by the Supabase client in your browser's local storage, not in a cookie, and Sign out on the account page removes it. The site sets no cookies of its own and runs no analytics.

Deleting your account. Email info@radbuddy.com from the address on the account and it will be removed, along with its licence records. Licence files already on your computer keep working until they expire, at most two days.

This website

The pages and downloads are static files. The web server keeps standard access logs (IP address, requested file, time) for operational purposes only, rotated automatically and not shared with anyone.

Disclaimer

Everything on this site and in the downloads is provided for research and demonstration purposes only. corad is not a medical device, has not been cleared or approved by any regulator, and must not be used to make clinical decisions. Use in a clinical setting is at the sole risk of the user. The authors assume no liability for any outcome resulting from its use.