Privacy Policy
Last updated: February 2026
1. What We Collect
- Account information: Your email address and optional full name, provided at sign-up or through Google OAuth.
- Audio during visits: Audio captured during a recording session is sent to Deepgram for real-time transcription. Audio is not stored on our servers after transcription completes.
- Transcripts and clinical notes: The text transcript and AI-generated note are stored in your account so you can review, edit, and access them from your visit history.
- Custom instructions: Any note-generation preferences you set in Settings are stored to personalise future notes.
2. How We Use Your Data
- To generate structured clinical notes from your visit transcripts.
- To store your visit history so you can retrieve and edit notes.
- To authenticate you and maintain your account securely.
- We do not use your data to train AI models.
- We do not sell your data to any third party.
3. Storage and Security
All data is stored in Supabase and is encrypted at rest and in transit using industry-standard TLS. Row-level security policies ensure you can only access your own records. No patient audio is retained after transcription.
4. HIPAA Notice
ENT Scribe is designed with HIPAA compliance in mind. Patient data is encrypted and access-controlled. However, physicians are responsible for verifying all AI-generated notes for clinical accuracy before entry into any EHR or patient record. ENT Scribe is a documentation tool, not a certified EHR.
5. Third-Party Services
- Deepgram: Receives audio for transcription. Subject to Deepgram's Privacy Policy.
- Anthropic Claude: Receives transcripts to generate clinical notes. Subject to Anthropic's Privacy Policy.
- Supabase: Stores your account data and notes. Subject to Supabase's Privacy Policy.
6. Your Rights
You may request deletion of your account and all associated data at any time by contacting us at gerritroska@ithiel.co. We will process deletion requests within 30 days.
7. Changes to This Policy
We may update this policy as the product evolves. Significant changes will be communicated via email or an in-app notice. Continued use after notification constitutes acceptance.