Privacy Policy

This Privacy Policy explains how the DocScribe Team (operating under the Hormonia brand, “we”, “us”, “our”) collects, uses, stores, and shares information when you use the DocScribe mobile application (“DocScribe” or the “App”) and the related services available at hormonia.in.

DocScribe is a productivity tool built for licensed medical professionals. It records consultations, generates structured clinical notes using AI, and helps doctors maintain visit history for the patients they treat. We take privacy seriously because the data we handle is sensitive by nature.

1. Who this policy applies to

This policy applies to licensed doctors and clinicians who sign up for DocScribe accounts. We do not collect data directly from patients. Patient information (name, age, gender, phone, consultation audio, and clinical notes) is entered or recorded by the doctor in the course of providing care, and the doctor is responsible for obtaining the patient’s consent to use DocScribe during the consultation.

2. Information we collect

a. Account information (from doctors)

• Email address (verified through our authentication provider)
• Full name
• Medical specialty (optional)
• Medical council registration number (optional, display-only)
• Years of experience (optional)
• Languages of practice (optional)
• Clinic name and city (optional)
• Typical patient profile (optional)

b. Patient information (entered by the doctor)

• Patient name
• Phone number
• Age and gender (optional)
• Consultation history within DocScribe

c. Consultation data

• Audio recordings of consultations (uploaded by the doctor)
• Text transcripts produced from the audio
• AI-generated clinical notes, prescriptions, and follow-up summaries
• Files the doctor attaches to a visit (lab reports, images)

d. Technical information

• Anonymised diagnostic logs (errors, request IDs) used to debug issues
• Device type and operating system version, recorded by AWS during authentication

We do not use third-party analytics, advertising, or tracking SDKs in the App. We do not sell or rent any user data.

3. How we use this information

• To transcribe consultation audio into text
• To generate structured clinical notes, prescriptions, and follow-up plans from the transcript
• To maintain the doctor’s patient history within DocScribe
• To improve transcription accuracy by learning the doctor’s vocabulary preferences (drug names, common conditions)
• To enforce consultation quotas and account limits
• To respond to support requests
• To send essential service notifications (account activity, billing once introduced)

We do not use consultation content to train or fine-tune general-purpose AI models.

4. Service providers we share data with

To deliver DocScribe’s functionality we rely on the following third-party processors. Each handles data only as instructed by us and does not use the data for their own purposes.

• Amazon Web Services (AWS)— hosts all DocScribe data in the Mumbai region (ap-south-1). This includes account information, audio files, transcripts, clinical notes, and database records. Authentication is handled by AWS Cognito.
• Groq, Inc.— transcribes audio recordings into text using the Whisper model. Audio is transmitted to Groq, transcribed, and the result is returned to our servers.
• Anthropic— generates structured clinical notes from the transcript using the Claude family of models, accessed either directly through Anthropic’s API or through Amazon Bedrock. Transcript text is sent for this purpose.

We may disclose information to comply with a legal obligation (court order, regulator request) or to protect the rights and safety of users.

5. How long we keep your data

• Audio recordings are automatically deleted 90 days after upload via an S3 lifecycle rule. The transcript and clinical notes generated from the audio are retained.
• Transcripts, clinical notes, and patient records are retained as long as the doctor’s account is active, because doctors rely on this history to provide continuity of care.
• Account data is retained while your account is active. If you delete your account, we delete your account data and associated patient/visit records within 30 days, except where retention is required by law (e.g. tax or audit obligations).

6. Your rights

Under the Indian Digital Personal Data Protection Act, 2023 (and equivalent regulations elsewhere), you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Withdraw consent for processing (subject to legal exceptions)
• File a complaint with the Data Protection Board of India

To exercise any of these rights, write to us at support@hormonia.in. We will respond within 30 days.

7. Security

We use encryption in transit (HTTPS/TLS) for all data transmitted between the App and our servers. Data at rest in AWS is encrypted using AWS-managed keys. Access to production systems is restricted and audited. No internet service can guarantee absolute security; if we ever experience a data breach affecting your information, we will notify you and the relevant regulator as required by law.

8. Children

DocScribe is intended for licensed medical professionals only. We do not knowingly create accounts for anyone under 18. If you believe a child has signed up, contact us and we will delete the account.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be communicated by email or through the App.

10. Contact

Questions about this policy or about your data? Reach us at support@hormonia.in.