How we protect your data and your patients' information
Last Updated: February 1, 2026Questions? Email privacy@novascribe.us
NovaScribe is a medical documentation assistant for healthcare providers. You record patient encounters using our iPhone app, and our AI generates clinical notes automatically.
The basics:
NovaScribe is designed to save you time on documentation while maintaining the accuracy and quality your patients deserve.
NovaScribe is designed and operated to comply with HIPAA requirements for protecting health information.
Important clarification: NovaScribe is a Business Associate, not a Covered Entity. We process Protected Health Information (PHI) on your behalf. Patient rights requests (access, amendment, accounting of disclosures) should be directed to you as the treating provider. We will assist you in responding to such requests.
| Data Type | Examples | Why We Need It |
|---|---|---|
| Account information | Email, password, name | To create and secure your account |
| Professional information | Medical specialty | To customize note formats |
| Audio recordings | Patient encounter dictations | To generate clinical notes |
| Payment information | Processed by Stripe | To manage your subscription |
| Data Type | Examples | Why We Need It |
|---|---|---|
| Clinical notes | AI-generated documentation | The service you're paying for |
| Medical codes | E/M levels, CPT codes | To assist with billing |
| Session metadata | Timestamps, duration | To organize your sessions |
| Data Type | Examples | Why We Need It |
|---|---|---|
| Device information | iPhone model, iOS version | To ensure compatibility and fix bugs |
| Push notification tokens | Apple-provided identifier | To notify you when notes are ready |
| Crash reports | Error logs (no PHI) | To fix bugs and improve reliability |
NovaScribe supports Face ID and Touch ID for convenient authentication. This biometric data never leaves your device - it's processed entirely by iOS and is not transmitted to or stored on NovaScribe servers.
When you use the NovaScribe iOS app, we request the following device permissions:
| Permission | Why We Need It | What Happens If You Decline |
|---|---|---|
| Microphone | To record patient encounter dictations | The app cannot record -- this is required for core functionality |
| Push Notifications | To notify you when your clinical note is ready | You can check note status manually in the app |
Your audio is recorded locally on your device and transmitted to our servers only when you tap "Generate Note." We do not access your microphone at any other time.
Here's exactly what happens when you record a patient encounter:
Data location: Your data is processed and stored on servers in the United States (Amazon Web Services, US-East-2 region).
We use secure, established AI cloud services to transcribe and generate your clinical notes. Here's how your data is processed:
| Processing Step | What Happens | Data Involved | Data Residency |
|---|---|---|---|
| Speech-to-text | Your audio is converted to a text transcript | Audio recordings (temporarily) | United States |
| Note generation | AI creates clinical documentation from the transcript | Text transcript | United States |
| Clinical analysis | AI assists with E/M classification and billing codes | Text transcript | Primarily United States; some supplemental analysis may be processed internationally |
All AI service providers we use operate under agreements that:
| Data Type | How Long We Keep It | How It's Deleted |
|---|---|---|
| Audio recordings | Deleted within 6 hours of processing | Automatic, permanent deletion |
| Clinical notes | Until you delete them or close your account | You control this |
| Account information | While active + 30 days after closure | Upon account deletion request |
| Billing records | 7 years (legal/tax requirements) | Automatic after retention period |
| Audit logs | 90 days | Automatic rotation |
To delete your account and all associated data:
Upon deletion request:
Note: We cannot delete data that we're legally required to retain (such as billing records for tax purposes).
We believe in being clear about what we don't do with your data:
You have control over your data:
Request a copy of the personal information we hold about you.
→ Email privacy@novascribe.us
Update inaccurate account information anytime in the app, or contact us for assistance.
→ Settings → Account in the app
Remove individual notes anytime, or delete your entire account.
→ Settings → Privacy → Delete My Account
Download your clinical notes in standard formats.
→ Contact privacy@novascribe.us
Unsubscribe from marketing emails (you'll still receive essential service communications).
→ Link in any marketing email
Control what notifications you receive.
→ Settings → Notifications in the app
If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
In the past 12 months, we have collected:
We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf.
NovaScribe is designed for licensed healthcare professionals. The service is not intended for use by individuals under 18 years of age.
We do not knowingly collect personal information from children under 13 (or other applicable age threshold). If we learn that we have collected personal information from a child, we will delete it promptly.
If you believe a child has provided us with personal information, please contact us at privacy@novascribe.us.
NovaScribe generates clinical documentation to assist healthcare providers. NovaScribe is NOT:
The clinical notes, billing codes, and other content generated by NovaScribe are suggestions only. As a healthcare provider, you are responsible for:
In accordance with Apple's App Privacy requirements, the following data may be linked to your identity:
NovaScribe subscriptions are managed through our website (novascribe.us) via Stripe, not through Apple In-App Purchases. The app provides access to your existing NovaScribe account and subscription. Subscription management, billing, and cancellation are handled at novascribe.us/settings.
We use Google Ads conversion tracking on our website (novascribe.us) to measure the effectiveness of our advertising. This tracking:
Google Ads conversion tracking is used on the website only, not within the iOS app. The NovaScribe iOS app does not embed third-party analytics SDKs.
We may update this Privacy Policy from time to time. When we make material changes:
Your continued use of NovaScribe after changes take effect constitutes acceptance of the updated policy.
Previous versions: Contact privacy@novascribe.us to request previous versions of this policy.
We're here to answer your privacy questions.
Proctor Medical Consulting, LLC
5636 Lake Trace Drive
Hoover, AL 35244
Response Time: We aim to respond to all inquiries within a few business days.