MUSTER Privacy Policy and Account Deletion

Effective July 24, 2026

This page explains what MUSTER stores, how it is used, and how you can request deletion of your account and associated data.

At a glance

• Advertising: None
• Data sale: Never
• Cloud provider: Google Firebase
• Account deletion: Available by request

Who this policy covers

MUSTER is a surgical case-log application developed by Dr. Bhushan Diwakar Thombre. It allows authenticated surgeons to record and review operative cases, follow-ups, clinical notes, outcomes, and images across their devices.

This policy applies to the MUSTER Android, iOS, and web applications. MUSTER is a record-keeping tool and does not provide medical advice.

Data processed by MUSTER

Account information

Your Google account name, email address, and optional profile image are used to sign you in and keep your records separated from other users’ records.

Surgical and patient data

Information you enter may include patient name, age, sex, UHID or file number, MRD number, phone number, diagnosis, procedure, surgery date, clinicians, outcome, notes, follow-ups, and clinical images.

Technical information

Google and Firebase may process limited device, network, authentication, security, and diagnostic information needed to operate and protect their services.

User-directed exports

When you export an Excel file or share content, the file is sent only to the destination you choose. You are responsible for protecting exported copies.

How the data is used

MUSTER uses data to:

• Authenticate your account and maintain your session.
• Store, retrieve, search, edit, and synchronize your case log.
• Upload and display case and follow-up images.
• Generate statistics, favourites, and user-requested exports.
• Respond to support, security, and account-deletion requests.
• Comply with legal obligations and protect the service from misuse.

MUSTER does not sell personal or health data. The current app does not contain advertising, marketing analytics, or third-party crash-reporting SDKs.

Storage, access, and service providers

MUSTER uses Google Sign-In and Google Firebase Authentication, Cloud Firestore, and Cloud Storage. Data is transmitted over encrypted HTTPS/TLS connections. App access controls are designed so an authenticated user can access records stored under their own account email.

Google processes data as a cloud service provider. Authorized project administrators may access data only when reasonably necessary for service operation, support, security, deletion requests, or legal compliance. Information may also be disclosed when required by law or to protect users and the service.

No internet service can guarantee absolute security. Users should protect their Google account, device, and any files they export.

Responsibilities when recording patient data

Surgeons and organizations using MUSTER are responsible for having an appropriate legal basis, authorization, or patient consent before entering identifiable health information. They must follow the privacy, confidentiality, record-retention, and professional requirements that apply in their location and workplace. Use de-identified information where practical.

Retention and your choices

Account and case data is retained while your MUSTER account remains active or until you request deletion. You may edit or delete individual cases in the app and export a copy of your case log before requesting account deletion.

Verified account-deletion requests are targeted for completion within 30 days. Limited residual copies may remain in provider backups or security logs for up to 90 days before routine deletion. Some information may be retained longer when required by law, professional record-retention duties, fraud prevention, security, or the establishment or defence of legal claims. When applicable, the requester will be told what must be retained and why.

Request account and data deletion

You can request deletion even if you no longer have the app installed.

1. Send a request from the Google email address used for MUSTER. Include the account email and ask to delete the account and all associated data.
2. We may reply to verify account ownership or clarify a legal retention requirement.
3. After verification, we will delete the MUSTER authentication record, cases, follow-ups, and uploaded images from active systems, subject to the retention exceptions above.

Email a MUSTER account deletion request

If the link does not open your email app, write to bdthombre@gmail.com with the subject MUSTER account deletion request.

Deleting your MUSTER account does not delete your Google account.

Children, international processing, and changes

MUSTER is intended for adult healthcare professionals and is not directed to children. Google may process data in countries other than the user’s own, subject to its contractual and legal safeguards.

This policy may be updated when the app, service providers, or legal requirements change. Material changes will be published on this page with a revised effective date.

Contact

Privacy questions, correction requests, and deletion requests can be sent to:

Dr. Bhushan Diwakar Thombre
bdthombre@gmail.com