Privacy Policy
Clinical Voice · Effective October 21, 2026
In short: we don't collect your data. Speech recognition, translation, label scanning and AI summaries run on your device. Nothing you say, type or scan is sent to us, and we have no servers that could receive it. If you use iCloud, some of your saved data syncs to your own private iCloud account, which we can't access.
Who we are
Clinical Voice ("the app") is published by an independent developer based in Canada ("we", "us"). You can reach us through our support form or our support page. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law.
What we collect
Nothing, through the app. The app has no accounts, no sign-in, no advertising, no analytics or telemetry tools, and no tracking. It contains no third-party code that collects data. We never sell or share personal information because we never receive any.
When you contact us
The app itself sends us nothing. If you choose to contact us through our support form (hosted by Tally) or by email, we receive what you send (for example your email address and your message) and use it only to answer you. Please don't include patient names or health details. Tally processes form submissions under its own privacy policy. We delete support messages once your question is resolved, or on request.
What happens on your device
- Speech is turned into text by Apple's on-device speech recognition. The app does not record or keep audio.
- Translation is done by Apple's on-device translation. Language packs are downloaded from Apple the first time you use a language.
- Scanned labels are read by Apple's on-device text recognition. Photos you pick are used only for that scan.
- Summaries and SOAP note drafts are written by Apple's on-device language model, on devices that have one. Apple's cloud model is never used.
Data stored by the app
- Personal mode: finished conversations (if "Save visits to history" is on), your saved phrases and questions, and saved medications and their reminder times. Stored on your device and, if you're signed in to iCloud, synced to your private iCloud database through Apple's CloudKit so they appear on your other devices.
- Healthcare mode: conversations are kept only in memory, never written to storage, and are erased when you start a new patient, erase the conversation, leave the conversation screen, or the app is closed. The app keeps a tamper-evident audit trail of events (for example "translation, English to Spanish, at 10:42"). It contains no conversation text: only the time, the language codes, a device identifier and one-way cryptographic hashes. It's stored on your device and synced to your private iCloud.
- Preferences such as your languages and settings stay on your device.
Data synced through iCloud is held by Apple under Apple's Privacy Policy. We have no access to it.
Network connections
Apart from Apple services (language-pack and model downloads, iCloud sync, App Store purchases), the app makes one network request of its own: about once a day it asks Apple's App Store whether a newer version exists, sending only the app's identifier. You can turn this off in Settings › App Updates.
Permissions
The app asks for the microphone and speech recognition (to hear the conversation), camera and photos (only if you scan a label), Face ID (to unlock Healthcare mode), notifications (only if you set medication reminders) and location (only if you set up the optional trusted-clinic auto-lock in Healthcare mode). Each is used on your device only, and you can withdraw any of them in iOS Settings.
Purchases
Subscriptions, lifetime purchases and tips are handled entirely by Apple. We receive no payment details. Apple gives us aggregated sales reports that do not identify you.
Crash and usage data
If you have turned on Share With App Developers in iOS Settings › Privacy & Security › Analytics & Improvements, Apple may share anonymous crash reports and usage statistics with us. This is controlled by you and Apple, not by the app.
Health information
Conversations can contain health information. Because it never leaves your device except to your own private iCloud, we do not receive, store, use or disclose it. Healthcare organizations remain responsible for deciding whether the app fits their own privacy obligations; see our Terms of Use.
Keeping and deleting your data
- Delete individual saved visits, phrases, questions or medications in the app.
- Turn off "Save visits to history" in Settings to stop saving conversations.
- Delete everything on a device by deleting the app.
- Delete iCloud copies in iOS Settings › [your name] › iCloud › Manage Account Storage › Clinical Voice.
Children
The app is not directed at children under 13. Parents and caregivers may use it during a child's medical visit.
Your rights
You have the right to ask what personal information we hold about you and to have it corrected or deleted. As we hold none, there is nothing to send or delete, but you're welcome to ask through our support form. You can also contact the Office of the Privacy Commissioner of Canada.
Changes
If this policy changes, we'll update the date above. If a change affects how data is handled, we'll explain it in the app before it takes effect.