Privacy notice

This notice covers QIP Assist at wmebemqipassist.netlify.app and the QIP Assist Android app, which opens the same site.

Last updated: 30 October 2026

Who we are

QIP Assist is part of EM Evidence (emevidence.org). The data controller is West Midlands Evidence Based Emergency Medicine Ltd, a company registered in England and Wales (company number 16644703; registered office 128 City Road, London, EC1V 2NX), registered with the Information Commissioner's Office (ICO) under registration number ZC277974. For any privacy question or request, email hello@emevidence.org.

Please don't enter patient-identifiable information

QIP Assist is for documenting quality improvement work. Don't enter patient names, dates of birth, NHS numbers or anything else that could identify a patient, anywhere in the app. Use counts and anonymised data only.

Demo mode

You can try QIP Assist in demo mode without an account. Demo projects are made up and stay on your device. We collect nothing that identifies you.

If you create an account

Accounts use Firebase Authentication from Google. You can sign in with an email address and password, or with Google. Your password is handled by Firebase Authentication and we never see it.

We keep, in Google's Cloud Firestore database:

• your email address, and your name if you give one or sign in with Google;
• when you last signed in, and the roles you choose (trainee, clinical supervisor, departmental QIP lead);
• your QIP projects and everything you enter in them, such as the aim, measures and data, PDSA cycles, team members and stakeholders (names, roles and email addresses you add), survey and feedback summaries, and sign-off records;
• the email addresses of the supervisors and QIP leads you add to a project, so the project appears in their account;
• if you ask for the clinical supervisor or QIP lead role, the details you give with the request (name, job title, hospital, Trust, department, and optionally your GMC or NMC number, work email, phone and a note) and whether the administrator approved or rejected it;
• an audit record each time an account adds or removes the supervisor or QIP lead role, and each time a supervisor or QIP lead opens someone else's project (who opened it, which project and when).

We use this only to run your account, to show your projects to you and to the supervisors and QIP leads you choose, and to check that only the right people see other people's projects. The EM Evidence administrator can see all projects to support users and keep the service safe. We don't use your information for advertising, and we don't sell it or share it with anyone else.

We keep your account and projects until you delete them or ask us to delete your account.

AI features

AI features are optional and only work if you add your own Google AI (Gemini) API key in Settings. The key is stored only in your browser. When you use an AI feature, the text involved is sent from your device straight to Google under your own key and Google's terms. We don't receive it.

Other services the site uses

When you ask for the clinical supervisor or QIP lead role, the details you give are also emailed to the QIP Assist administrator through Loops, our email service, so they can check the request.

The site is hosted by Netlify. Fonts and some program libraries load from Google Fonts, unpkg and cdnjs. Like any website, these services process standard web server data (such as your IP address and browser type) to deliver the files. Your browser also keeps some settings on your device.

Deleting your account

You can ask us to delete your account and everything linked to it at any time. See Delete your QIP Assist account.

Where your information is held

Google (Firebase), Netlify and Loops may process your information outside the UK. Each provides safeguards for international transfers under UK data protection law. All data is sent over encrypted (HTTPS) connections.

Your rights

You can ask to see, correct or delete the information we hold about you by emailing us. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office.

For the rest of EM Evidence, including the mailing list, see the EM Evidence privacy notice.