pagr
Privacy policy
Last updated: 4 November 2026
Who we are
pagr is a hospital phone directory app at app.pagrapp.com (and in Google Play as “pagr - Hospital Switchboard”). It is run by Egan Health (ABN 87 673 764 728), in Australia. In this policy, “we” means Egan Health.
Questions, requests or complaints: support@pagrapp.com.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What pagr is for
pagr helps hospital staff find and call extensions, pagers and phone numbers. It is not a medical device and must never hold patient information.
What we collect
- Your account: your email address, and your name if you add one. If you sign in with Google, we receive your Google account's email address and name. If you use a password, we store only a secure hash of it. If you add a passkey, we store its public key; your device keeps the private key.
- What you add to the directory: names and numbers you add or edit, and a history of those changes (what changed, when and by whom). Admins of a health service can see who made a change.
- Your settings: your main hospital, saved hospitals and favourites.
- Invite codes: if you joined with an invite code, which code you used, so admins can see how many people each code let in.
- Reports: if you report an entry, we keep the reason, any note you add and that it was you, so you can change or withdraw it. Admins see how many reports an entry has and why, not who sent them.
- Usage counts: when you call or copy a number, we add one to that entry's count for the day. We don't record who made the call. To count each person once an hour, a one-way hash of your account and the entry is kept briefly and deleted within about 10 days.
- Technical information: your IP address, used for security and to limit repeated attempts (for example, too many sign-in tries); it is deleted within about 10 days. Our hosting providers keep short-lived request and error logs. We don't use advertising or analytics trackers, and the app only sets the cookies needed to keep you signed in.
- On your device: a copy of the hospitals you use, so pagr works without signal. Signing out removes it.
What the people who run pagr can see
Your email, when you joined and last opened a hospital, how many hospitals you use and how many edits you've made, so we can help people who get stuck signing up and see whether pagr is useful. Not which numbers you call.
Directory content and other people's information
The directory is shared with everyone who can sign in to pagr. While sign-up is open to any email address, that means anyone who creates an account. When sign-up is invite-only, it means people with an invite code or an email from a listed health service.
Entries are mostly departments, wards and roles. Some list mobile numbers, which are usually hospital phones that pass to whoever is on duty. If your own phone number is listed and you want it removed, email support@pagrapp.com. Please don't add anyone's personal number without their agreement.
Why we use it
To sign you in and keep your account secure; to run the shared directory and its change history; to send you codes that confirm your email or reset your password, and (for admins) a daily summary of edits; to show admins which entries are reported or unused so they can be fixed; to help people who get stuck; and to deal with misuse. We don't use your information for advertising and we don't sell it.
Who processes it for us, and where
We use these service providers. Some are outside Australia, so your information may be sent overseas (APP 8). We choose providers that protect it, and we only send them what they need.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in: your account and everything in the directory | Sydney, Australia |
| Vercel | Runs the app; short-lived request and error logs | Sydney, Australia (Vercel is a US company and may access logs from the USA) |
| MXroute | Sends our emails (sign-up and password codes, admin summaries); sees your email address and the email | Mainly Virginia, USA |
| Only if you choose “Continue with Google” | USA and other countries | |
| GitHub Pages | Hosts this website (pagrapp.com); sees visitors' IP addresses in its logs | USA |
| Cloudflare | Domain name service for pagrapp.com, and email-authentication reports that contain no user data | Global network |
| Ko-fi | Only if you choose to donate from the website; Ko-fi's own privacy policy applies there | United Kingdom |
How long we keep it
- Your account: until you delete it.
- Accounts that never get in (email never confirmed, or no invite code while sign-up is invite-only): deleted after 30 days.
- Deleted directory entries: removed for good after 180 days.
- Directory entries you added: stay after you delete your account, without your name, so other staff can still use them.
- Backups: we don't currently keep separate backups, so deleted information can't be restored.
Security
Information is encrypted in transit (HTTPS). Access to the directory needs a signed-in account, and the database enforces who can see and change what. No system is perfectly secure; if a breach is likely to cause serious harm, we'll tell affected people and the Office of the Australian Information Commissioner as the law requires.
Your choices and rights
- Delete your account: in the app (Settings → Account → Delete my account) or by email. See how to delete your account.
- Access or correct your information: email us and we'll respond within 30 days.
- Complaints: email us first and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Age
pagr is for hospital staff and isn't intended for anyone under 18.
Changes
We'll update this page and change the date above. Significant changes will be announced in the app.