IsiX DICOM Viewer privacy policy

Local study data

Imported and retrieved DICOM objects, patient metadata, study indexes and derived viewing data are stored locally. The library can contain sensitive information in both metadata and image pixels.

Archive and listener traffic

DIMSE and DICOMweb operations communicate with the nodes you configure. Requests, transfers and enabled automatic query/retrieve rules can send patient search criteria, identifiers or DICOM objects to those systems. Authentication may also contact the configured identity service.

Listeners accept incoming studies when activated, and service discovery can advertise a receiving endpoint. Apple defaults disable the listener and Bonjour publication. Android’s clear-text listener requires acknowledgement before it starts; review its listener and discovery preferences.

Credentials and transport

Apple builds keep archive credentials and authentication tokens in Keychain stores. Android encrypts stored archive passwords using an Android Keystore key. These protections do not mean every study file or network connection is encrypted.

Choose TLS or HTTPS where supported and verify the archive’s configuration. An unencrypted connection can expose transferred content on its network.

Diagnostics

The app implements local diagnostic logging. Optional error and usage diagnostics default off in both implementations; Apple also registers for local MetricKit diagnostic payloads. The audited application code does not configure an external analytics or crash-upload backend.

Diagnostic exports leave the app when you choose to share them. Review the bundle before sending it to someone else.

Exports and companion devices

Exports, share sheets, archive sends and Apple companion presentation transfers create copies outside the local study library. The chosen recipient, application, device or archive controls those copies.

Removing a local study cannot recall an exported file, a companion-device copy or a study stored on an archive.

Deletion and backups

Use study deletion to remove local catalog content, and storage controls to clear supported derived data. Keep any needed independent backup before deleting studies.

Android disables operating-system app backup in its manifest. Apple provides catalog backup workflows that exclude Keychain secrets; device backup settings and separately exported files have their own lifecycles. Local deletion does not delete those copies.

This support website

This static website does not use analytics scripts, forms, or third-party tracking scripts. GitHub Pages handles requests to the website under its own hosting and privacy practices. Visiting a source repository or contacting another service is subject to that service's policies.

Policy updates

This policy may change when the software's data handling changes. The effective date above identifies this version. Features and integrations can differ by release and platform.