Security and data use

What the live site accepts—and what it does not.

This page describes the service available now. Security and privacy information will be expanded before stored documents, payments or connected services open.

01

Current scope

The live site provides a saved free Passport, an optional goal-research request, one signed-in free Money Check case, public demos and Money Monitor interest registration. It does not yet accept payment or connect to a mailbox.

02

Local file reading

The free check can read an XLSX or CSV timetable, iCalendar export and one payslip PDF inside your browser. An older rota screenshot can be displayed locally as a manual reference but is not automatically extracted. The files, screenshot, extracted text, selected-month calendar, edits and calculated result are not sent to or stored by Doctor’s Passport.

03

One selected month

You choose the payslip month before review. A file or feed may contain a wider date range, but only entries dated within the selected month enter the editable calendar; other entries are discarded from the check during parsing.

04

Complete rota review

Every import is an unverified draft. Teaching, Rest/off, annual leave, study leave, sickness and bank holidays remain labelled, while blank dates remain unresolved. Every date and calendar week must be confirmed. A sickness entry must be completed with the hours and type of shift originally planned; the checker does not request a diagnosis or reason for sickness, and those details stay in your browser.

05

Calculation boundary

The free result calculates a monthly basic-pay reference from the confirmed England 2016-contract nodal stage and, for LTFT doctors, agreed basic-pay hours. Recognised gross, net, tax, NI, pension and student-finance amounts are shown but explicitly not assessed. Additional/enhanced hours, weekend frequency, NROC, premia, bank work and arrears require further contractual evidence.

06

One free case

Sign-in is required before private files are opened. The database stores only a pseudonymous account key, the activated payslip month and activation timestamp for the free-case limit. Rota, payslip, amounts and result remain browser-local. Corrections to the same month remain available.

07

One-time Loop import

A supported private Personal Roster link is available only for the current or immediately preceding month and is retrieved once through the Doctor’s Passport server because Allocate does not permit this browser to read it directly. Older months require a saved file, local screenshot reference or manual reconstruction. The importer accepts only the approved Liverpool Employee Online address and calendar path, blocks redirects and oversized or non-calendar responses, and does not save the link, token, calendar or result. The provider response exists transiently while the selected month is extracted. It does not stay connected or refresh automatically.

08

Example-only demos

Alex’s records are invented. The public demos do not need real payslips, receipts, rota files, emails or clinical information.

09

Minimum interest data

The shared form asks for a current UK medical role, broad region, selected Passport, first intended use, price response, access timing, email and contact consent. It does not ask for a call, documents or confidential details.

10

Restricted results

Interest results are available through an owner-restricted response view. They are not public.

11

Saved free record

A signed-in user can save one profile, one current rotation and up to twelve active goals under the fair-use limit. Do not enter patient-identifiable information, colleague details, clinical notes, health information or confidential organisational information.

12

Bounded goal research

Goal research is optional. The source-led fallback does not send goal context to OpenAI. When live source research is available, only the non-confidential context needed for the request is sent; identity, organisation and uploaded rota or payslip files are excluded. Every returned action, date and source remains a draft for the doctor to check.

13

No clinical record

Assessment drafting uses the supplied example scenario and is not a clinical-record system. The free Passport is for professional administration only.

14

Future email capture

The first email-assisted approach would use messages a doctor forwards or deliberately selects. Every proposed event, receipt or record would require confirmation; the service would not silently scan an inbox.

Questions or concerns

Contact the named operator.

Email hello@doctorspassport.co.uk. Privacy requests can be sent to privacy@doctorspassport.co.uk.

Read the privacy notice