CanX Community is a peer-support social platform for people affected by cancer — patients, survivors, caregivers, and verified oncology professionals. We store the minimum we need to run the community, encrypted in our database. We do not sell your identity or personal data, and we do not track you across the web. Part of what CanX does is connect you with information relevant to your cancer — trials, cancer centers, and programs from institutions, government sources, and industry — matched using your profile, here in the app, and always clearly labeled when it's sponsored (see §8). You own what you post, and you can export or delete your account at any time.
CanX Community is operated by the CanX team as an independent peer-support product. CanX Community is not a HIPAA-covered entity in its current form, and it is not a healthcare provider. We are not your doctor, hospital, or clinic. Content you share is peer support and education, not medical care. See our Safety & Crisis Policy.
If you join our early-access list before launch, we collect your email address and an optional self-selected segment (for example "newly diagnosed" or "caregiver"). We use these only to contact you about early access and launch, and to gauge who our founding community is. Nothing else is required to join the list.
| Purpose | Data used | Basis |
|---|---|---|
| Run your account and the community | Email, profile, content | Contract (your account) |
| Stage-aware feed and peer/channel matching | Optional stage, cancer type, follows | Contract |
| Verify clinicians | NPI number (checked against public NPPES) | Legitimate interest in trust & safety |
| Safety triage | Text of posts and DMs is scanned for crisis signals before publishing (see Safety Policy) | Legitimate interest in user safety |
| Moderation | Reported content, author, report reason | Legitimate interest in a safe community |
| Early-access outreach | Waitlist email & segment | Your request to be notified |
Direct messages are private — database Row-Level Security restricts each message so that only the sender and the recipient can read it. However, DMs are not end-to-end encrypted and should not be treated as medical-grade confidential communication. Do not share information in a DM that you would not want disclosed in the unlikely event of a breach or a lawful request. Our automated crisis detection also scans DM text for signals of imminent harm (see Safety Policy).
| Vendor | What they do | What they see |
|---|---|---|
| Supabase (Postgres + Auth) | Database and authentication | Account data and content, encrypted at rest |
| Vercel | Hosts the site | Standard server logs (request URL, IP, user-agent) |
| Google Fonts | Serves the Inter typeface | Standard font-file request metadata |
| NPPES / NPI Registry (US HHS) | Clinician verification lookup | Only the NPI number a clinician submits |
We do not sell, rent, or hand over your identity or personal data to any advertiser, data broker, or industry partner. If we ever integrate an AI assistant into the community, we will update this policy first and disclose exactly what text is sent and to whom.
Part of what CanX is for is connecting you with information that's genuinely relevant to your cancer — recruiting clinical trials, cancer centers, and programs from institutions, government/NCI sources, and industry (for example, patient-assistance or expanded-access programs). Because this is a core benefit, we want to be plain about how it works:
If we ever use aggregated, de-identified community data to study how peer support helps people, participation will be opt-in, the data will be de-identified before use, and we will describe the method here with at least 30 days' notice before it takes effect.
CanX Community is for users 18 and older. We do not knowingly collect data from anyone under 18. Younger patients are better served by age-appropriate organizations (for adolescents and young adults, see groups such as Stupid Cancer). If you believe a minor has created an account, contact us and we will remove it.
CanX Community is operated from the United States. If you use it from another country, your data will be transferred to and processed in the United States. You consent to this transfer by using the service.
Email: privacy@canxspectrum.com
For security disclosures, use the same address with subject prefix [SECURITY].
Material changes will be announced in-app and by email (where we have it) at least 30 days before they take effect. The current version is always available at the /legal/privacy.html path of the CanX Community site.
Cross-references: Terms of Service · Safety & Crisis Policy