Privacy Policy

At Dr. Nora, we understand that you work with sensitive client information. Privacy isn't just a feature for us—it's fundamental to how we built this service. This policy explains what data we collect, how we handle it, and the measures we take to protect it.

Our Core Privacy Principle

We do not store your voice recordings or the content of your therapy notes after processing. When you send us a voice note, we process it to generate your documentation, deliver the result to you, and then delete the original recording and any intermediate data. We have no interest in your clinical content—our job is to help you document, not to collect data.

Information We Collect

Account Information: Your phone number (for WhatsApp communication) and any contact details you voluntarily provide when reaching out to us.

Usage Data: Basic analytics about how you interact with our service, such as when you use it and how many notes you generate. This helps us improve the service and understand usage patterns.

Voice Recordings: The voice notes you send are processed in real-time to generate your documentation. These recordings are automatically deleted after processing is complete—typically within minutes.

Generated Notes: The formatted notes we create are delivered to you and then removed from our systems. We do not maintain a database of your clinical documentation.

How We Use Your Information

We use the information we collect to:

• Process your voice recordings and generate formatted clinical notes
• Communicate with you about your account and our service
• Improve our AI models and service quality (using anonymized, aggregated data only)
• Send you important updates about changes to our service or policies
• Respond to your support requests

Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: All data transmitted to and from our service is encrypted using industry-standard protocols
• Automatic Deletion: Voice recordings and generated content are automatically purged after delivery
• Name Anonymization: Our system automatically detects and anonymizes client names during processing
• Access Controls: Only essential personnel have access to our systems, and all access is logged
• Secure Infrastructure: We use reputable cloud providers with strong security certifications

HIPAA Considerations

While Dr. Nora is designed with healthcare privacy principles in mind, we want to be transparent: we are a small company and are not currently HIPAA-certified. Our approach is to minimize data collection and retention to reduce risk. We encourage you to evaluate whether our service meets your practice's compliance requirements. If you have specific compliance questions, please contact us.

Third-Party Services

We use WhatsApp as our communication platform, which has its own privacy practices. We also use third-party AI services to process voice recordings and generate text. These providers are selected for their security practices, and we do not share identifiable client information with them. The content processed through these services is subject to our data deletion policies.

Your Rights

You have the right to:

• Access: Request information about what data we hold about you
• Deletion: Request deletion of your account and associated data
• Portability: Request a copy of your data in a standard format
• Opt-out: Stop using the service at any time with no penalty

Because we don't retain voice recordings or generated notes, there's typically very little clinical data to delete—mainly just your contact information and usage history.

Data Retention

Voice recordings and generated notes: Deleted immediately after processing and delivery. Account information: Retained while your account is active and for a reasonable period afterward for legal and business purposes. Usage analytics: Retained in anonymized form to improve our service.

Children's Privacy

Dr. Nora is designed for use by licensed healthcare professionals. We do not knowingly collect information from individuals under 18 years of age.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we'll notify you through the service or via the contact information you've provided. Your continued use of Dr. Nora after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@drnora.ai. We're a small team and we read every message.