Privacy Policy

1. Introduction

Patient Diary AI ("we", "our", or "us") is committed to protecting the privacy of healthcare professionals and their patients. This Privacy Policy explains how we collect, use, and safeguard clinical data within our platform.

2. HIPAA Compliance

Our platform is designed to be fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). All Protected Health Information (PHI) is encrypted at rest and in transit using AES-256 and SSL/TLS protocols.

3. Data Collection

We collect only the data necessary to provide our clinical services, including:

• Account information (name, clinical email, practice details)
• Patient clinical history (stored securely and encrypted)
• OCR scan results and clinical notes

4. Data Utilization

Your data is used exclusively for providing clinical intelligence and management features to YOU. We DO NOT sell clinical data to third parties, and we do not use PHI for marketing purposes.

5. Data Deletion Policy

You have the right to request the deletion of your personal data and clinical information from our platform. To request data deletion, please contact us at support@patientdiary.net. Upon receiving a verifiable request, we will securely delete your account and all associated data, in accordance with applicable data retention laws and HIPAA regulations.

6. Payment Processing

Payment processing for our subscriptions is handled by Paddle.com. Your payment information is collected and processed by Paddle in accordance with their Privacy Policy. We do not store your credit card information on our servers.

7. Contact Us

If you have questions about our privacy practices or data security, please contact our Data Protection Officer at support@patientdiary.net.