Privacy policy
Last updated 2026-11-04. Covers hospitalnetzero.com and the CHFM Exam Prep app.
Who we are
Hospital Net Zero, operated by Tariq Khurshaidi, Karachi, Pakistan. Contact: support@hospitalnetzero.com.
Website
- The estimator, calculators and engineering toolkit run in your browser and send no data to us.
- If you use the contact form we receive your name, email and message, and use them only to reply.
- We do not currently use analytics or advertising cookies. Where we do, we will list it here.
Accounts and saved LEED projects (website, optional)
- What we store if you create an account: your name, email address, a salted hash of your password (we never store the password itself), and the LEED project data you choose to save, such as project names, notes, points and evidence references. If you sign in with Google we receive your name, email address and Google account identifier from Google, and nothing else.
- Why: only to let you sign in and return to your projects, and to send account emails (confirmation and password reset). We do not use it for marketing, advertising or profiling, and we do not sell or share it.
- Please do not enter patient information or other personal health information. The workspace is for facility and sustainability planning data.
- Cookie: signing in sets one session cookie that is strictly necessary to keep you signed in. It is not used for tracking and it expires when you sign out or after 14 days of inactivity.
- Where it is kept: on our hosting provider's server (GoDaddy, United States). Data is stored for as long as your account exists.
- Your control: you can download all of your data or delete your account and every saved project at any time from the account page. Deletion is immediate. You can also email us.
- Security: passwords are hashed, sign-in attempts are rate limited, and sessions are protected against cross-site requests. No system is perfectly secure, so keep exports of important work.
CHFM Exam Prep app
- Stored on your device: study progress, answers, flashcards and settings. This data stays on your phone and is not sent to us.
- No internet use by the app: the app works fully offline and does not transmit your study data to any server.
- Purchases: handled by Google Play. We do not receive your payment details.
- Your control: export or delete your data from the app settings, or uninstall the app to remove it.
No sale, no sharing, no tracking
We do not sell or share personal information, and we do not use it for targeted advertising or profiling. The site sets no cookies unless you sign in (one strictly necessary session cookie, described above) and loads no analytics or advertising trackers. Because we do not track you across sites, there is nothing for a Do Not Track or Global Privacy Control signal to switch off; we honor those signals by default.
Your rights (United States and elsewhere)
You can export or delete your app data inside the app, or email us. Residents of California and of other US states with privacy laws, and people covered by the GDPR, may ask us to confirm whether we hold personal information about them, to give them a copy, to correct it or to delete it. Email support@hospitalnetzero.com from the address you used. We will verify the request and respond within 45 days (or sooner where the law requires). We will not treat you differently for making a request. If we refuse, you may appeal by replying to our answer, and you may also contact your state attorney general.
Categories of information
Website contact form: identifiers (name, email address) and the message content. App: nothing leaves your device. We collect no sensitive personal information, precise location, health data or children's data, and we do not buy or receive data about you from other sources.
We reply to messages you send. We do not send marketing email at present. If we start a newsletter, it will go only to people who sign up, will identify us and our postal contact on request, and every message will include a working unsubscribe link, as the CAN-SPAM Act requires.
Security and retention
We use reasonable safeguards. We keep contact messages only as long as needed to respond, normally no more than 12 months, and then delete them. Messages are delivered by email through our hosting provider (GoDaddy). We do not currently run any analytics tool; if that changes this policy will be updated first.
Changes
We will post changes on this page with a new date.