Anonymization

Doomina protects patient identity with a single, consistent policy: it reduces the name to initials, masks the Patient ID and accession, hides the institution and keeps the exam name and date (clinically useful). The same rule applies to both the on-screen mask and the file anonymization.

What changes and what stays

• Patient name → initials, e.g. AMANCIO JOSE BERNARDES NETO becomes A.J.B.N.
• Patient ID and accession → ******
• Institution, physician, birth date, sex, phone, address… → removed
• Deliberately kept: the exam name (study description) and the dates (always shown as dd/mm/yyyy)
• In the viewer, the name is never truncated — it always reads in full.

The three layers

1. Hide identity on screen (paid)

A visual mask — it doesn't alter the file. In the viewer, tap the eye / eye-slash icon on the name line (or the “Anonymize” button at the bottom of the study/series list). The name shows as initials and the ID as ******. It's a paid feature; on the free tier, tapping it shows an upgrade notice.

2. Anonymize the file (paid)

Rewrites the DICOM (in the browser) with the same policy and remaps the unique identifiers (UIDs), so the file can be shared safely. This runs automatically (and mandatorily) when you publish to communities, challenges or peer shares.

3. Presentation (free)

In presentation mode, free-tier users are always projected anonymized (an automatic, always-on protection). Paid plans may choose to reveal the identity.

Important limit

Anonymization acts on metadata, not the image content. It does not remove identifiers “burned into” the pixels (common in ultrasound, screenshots and scanned documents). Before sharing, visually check that no patient data is visible in the image itself.

See also Privacy & storage for the full data-handling policy.