Legal
Privacy Policy
Last updated April 2026
What we collect
We collect your email address when you sign up. During consultations, we temporarily process audio recordings solely to produce a transcript — audio is deleted immediately and permanently after transcription. We store the resulting transcripts and SOAP notes in your account as part of your clinical record. We log owner consent and consent timestamps per session as a medico-legal record.
Audio data
Audio files are deleted from our servers immediately after a successful transcription. They are never stored long-term, never shared with third parties, and never used to train AI models. This is a hard constraint in our architecture, not a policy that can be changed by configuration.
How we use your data
Your data is used exclusively to provide the Kalico service. We do not sell your data. We do not use your clinical notes or transcripts for advertising. We do not share patient data with third parties except as required to operate the service (Supabase for database/auth, Groq for transcription, Anthropic for note generation).
Security
All data is encrypted at rest using AES-256 via Supabase. All data in transit is encrypted via TLS. Sessions expire after 24 hours of inactivity. API keys for AI services are stored as server-side secrets only — they are never included in the mobile app bundle or client-side code.
Data retention
Transcripts and SOAP reports are retained indefinitely as part of your clinical record. You can delete individual visits at any time, which permanently removes the associated transcript and report. Audit logs are retained indefinitely as a medico-legal record and cannot be deleted. Email addresses are retained while your account is active. You may request full account deletion by contacting us.
Cookies
We use only necessary cookies for authentication (Supabase session tokens). We do not use tracking cookies, analytics cookies, or advertising cookies.
Contact
For any privacy questions or data deletion requests, contact us at privacy@pawscribe.app.