Privacy Policy
Clinical AI records a consultation, transcribes it and writes the note. That means the app handles the most sensitive category of information there is. This page says plainly what is collected, who else touches it, and how to get rid of it.
Who this is between
The doctor using Clinical AI is responsible for their patients' records — they decide what to record, what to keep and what to publish. Clinical AI processes that material on the doctor's instruction and for no other purpose. If you are a patient and want a recording or a note removed, ask your doctor first; they control it.
What we collect
Your account. Your name and email address, and a hashed password — never the password itself. If you sign in with Google we receive your name, email address and profile picture from Google, and nothing else.
Recordings and transcripts. Audio you record in the app, and the text it becomes. Live dictation streams from your device to our speech-to-text provider as you speak. A recording you upload is stored in our cloud storage so it can be transcribed, and the transcript is kept with the note.
Photographs and documents. Prescriptions, lab reports and clinical photographs you choose to attach. The app opens the camera or your photo library only when you ask it to, and only the images you pick are uploaded.
Your notes. Consultations, prescriptions, templates and everything else you write, synced to our servers so a second device is the same workspace rather than a second one.
We do not collect your contacts, your location, your calendar, or anything from other apps on your phone.
Who else sees it
Three kinds of processor, each under contract and each doing one job:
Speech to text. Recordings and live audio go to Soniox to be transcribed, and come back as text.
Language models. A transcript, and the text of a photographed document, are sent to our language-model provider to be turned into a structured note. The model is asked to write up what was said; it is never asked for a diagnosis.
Hosting. Notes live in a managed Postgres database. Audio and images live in an Amazon S3 bucket in the Asia Pacific (Hyderabad) region — your data stays in India.
Nobody else. We do not sell your data, we do not share it with advertisers, and there is no advertising or third-party analytics SDK in the app.
Publishing is the one public thing
When you press publish on a note, that note becomes a public web page that anyone with the link can read, and it carries your name as the author. Nothing else you write is ever public. Publish only what you have de-identified and are willing to have read by strangers — a published note can be unpublished, but a page that has been shared may already have been copied or cached elsewhere.
How long it is kept
Notes, recordings and images are kept until you delete them or close your account. Deleting a note removes it from your devices and from our servers. Closing your account deletes your notes, your recordings, your images and your published pages.
To close your account and have everything deleted, email srinathspeaks@gmail.com from the address you signed up with. We action it within 30 days and confirm when it is done.
Security
Everything travels over TLS. Passwords are stored hashed. Session tokens are held in your device's secure storage — the iOS keychain, the Android keystore. Uploads use short-lived signed URLs rather than a public bucket. No system is perfect, and we will tell you if something happens that affects your data.
Your rights
You can ask for a copy of your data, a correction, or its deletion, at the address below. If you are in a jurisdiction with statutory data rights — India's DPDP Act, the GDPR — those rights apply and we will honour them without charge.
Children
Clinical AI is a tool for practising clinicians and is not directed at children. We do not knowingly create accounts for anyone under 18.
Changes
If this policy changes in a way that affects what happens to your data, we will say so in the app before the change takes effect. The date at the top always reflects the current version.