Privacy Policy

3.1 Account and Identity Information

• Full name, date of birth, and gender
• Email address and mobile phone number
• Profile photograph (optional)
• Family member profiles added by the account holder

3.2 Health and Medical Information

This is sensitive data. We collect it only to provide core health features and only with your explicit consent.

• Prescription documents and medication details (uploaded by you)
• Medical history and chronic condition records (self-reported)
• Medication schedules and adherence logs
• Health Responsibility Score (HRS) data points
• Vitals and health readings you choose to log (blood pressure, glucose, etc.)
• Doctor consultations and clinical notes (if connected to DocNote)
• Healthcare provider information

3.3 Usage and Technical Information

• App interactions, features accessed, and session duration
• Device type, operating system version, and unique device identifiers
• IP address and approximate location (country/city level)
• Push notification interaction data
• Crash reports and app performance diagnostics

3.4 Device Permissions We Request

• Camera / Photo Library: To upload prescription images and profile photos
• Microphone: To carry your side of an in-app AI voice call. Your speech is streamed live for transcription while the call is connected. See Section 6
• Notifications: To send medication reminders, health alerts, and incoming in-app call alerts
• Biometrics (Face ID / Fingerprint): To secure your account login (optional)

You can revoke any permission at any time through your device settings. Revoking certain permissions may limit app functionality.

3.5 Voice Call and AI Conversation Data

Desha places and receives AI voice check-in calls, and hosts in-app AI conversations. This produces its own category of data. Section 6 describes it in full.

• Your speech during a call, streamed live to a speech-to-text service while the call is connected
• A written, word-for-word transcript of the call, both your turns and the assistant's
• An AI-generated written summary of the call and its outcome
• An audio recording of the assistant's spoken side of a telephone call. We do not store an audio recording of your own voice
• Facts the AI extracts from the conversation (for example a symptom you mentioned, an allergy, a medication you confirmed, a preferred call time) and keeps so later calls have context
• Call metadata: the phone number called and called from, date, time, duration, language, direction, the telephony carrier used, and an urgency classification

The same handling applies to in-app AI calls and to AI chat sessions with the Health Companion.

3.6 Payment Information

The MedNote iOS app is completely free and does not offer any In-App Purchases. Protect Plus subscriptions are purchased exclusively through the Desha AI website at desha.ai.

Web-based subscription payments are processed by our third-party payment processor. We do not store your full payment card details on our servers. Billing records are retained for legal and tax compliance purposes.

5.1 What AI Service We Use

MedNote's Prescription Intelligence Engine is powered by Microsoft Azure AI Services (Azure Cognitive Services / Azure AI Document Intelligence), operated by Microsoft Corporation. Azure AI processes prescription images on our behalf under a Data Processing Agreement that requires equivalent data protection standards to those we apply.

5.2 What Data Is Sent to the AI Service

When you use the Prescription Intelligence feature, the following data is transmitted to Azure AI:

• The prescription image or document you upload (JPEG, PNG, or PDF)
• A unique request identifier (not your name, email, or account ID)

What is NOT sent: Your name, email address, date of birth, account credentials, or any other personally identifiable information is never transmitted to the AI service. The image is processed ephemerally. Azure AI does not retain it after the response is returned.

5.3 What the AI Returns

The AI service returns structured data extracted from the prescription: medication names, dosages, frequency, and prescribing doctor's name (where visible). This extracted data is then stored in your MedNote profile on our secure Azure servers and linked to your account. It is never shared with other users or third parties beyond the hosting described in Section 8.

5.4 Your Consent and How to Opt Out

5.5 Azure AI Data Protection

Microsoft Azure AI Services is bound by the following protections, which meet or exceed our own standards:

• ISO 27001, SOC 2 Type II, and CSA STAR certified
• HIPAA Business Associate Agreement (BAA) eligible
• GDPR compliant. Azure processes data as a Data Processor under our instructions
• Data is not used to train Microsoft's AI models unless you explicitly opt in (we do not enable this)
• Processed data is deleted from Azure's transient cache immediately after response

6.1 When the AI Assistant Speaks With You

• Outbound reminder calls: we telephone the mobile number on your profile about a dose that is due or has been missed
• Inbound calls: you call one of our numbers and the assistant answers
• In-app calls: a voice call carried inside the MedNote app over the internet rather than the telephone network. This is the one that uses your microphone permission
• Health Companion chat: typed AI conversations in the app, which are stored the same way as a call transcript

You are always speaking to software. It is not a clinician, and no member of Desha staff listens to your call while it is happening.

6.2 What We Capture and Store

• Your speech, while the call is live: streamed to a speech-to-text service so the assistant can understand you. We do not keep this audio
• A verbatim transcript: every turn of the conversation, yours and the assistant's, with timestamps. Stored against your profile and not truncated
• An AI-written summary of what was discussed and how the call ended
• An audio recording of the assistant's side of a telephone call: a sound file of what the assistant said to you. Your own voice is not stored as audio. In-app calls are not recorded as audio at all
• Extracted memory facts: after the call, an AI model reads the conversation and writes out key facts, such as a symptom, an allergy, a medication you confirmed, or a preferred call time. These are kept against your profile and re-used to give context on later calls
• Call metadata: the number called and called from, date, time, duration, direction, language, the carrier used, and how many turns were exchanged
• An urgency classification derived from the conversation, used to decide whether the call needs to be escalated

Unlike prescription scanning (Section 5), this data is not de-identified before processing. Your name, your phone number and your patient identifier are attached to the stored call record.

6.3 Processors Involved in a Call

Delivering a voice call needs several specialist providers. Each one receives only the part it needs:

Which carrier calls you depends on your country. Numbers in India are called via Plivo. Numbers in the United Kingdom, Germany and France are called via Telnyx. Numbers in the United States, Canada, Australia, Japan, Spain, Mexico, Brazil, the United Arab Emirates and all other countries are called via Twilio.

6.4 Automated Processing, and What the Assistant Will Not Do

The assistant can log that you confirmed or missed a dose, answer questions about medication you have already recorded, classify how urgent the conversation sounds, and raise an alert. That is the extent of it.

• It does not diagnose you, prescribe, or change a medication or dose
• It does not make an autonomous clinical decision, and it cannot alter your prescription record on its own
• It is not a medical device, and it is not an emergency service. Nobody is listening live. If you are having a medical emergency, end the call and contact your local emergency services
• We do not use these calls to make decisions about you that produce legal or similarly significant effects by automated means alone

Escalation. If the conversation contains indicators of an emergency or acute distress, an alert may be raised. That alert can include a short excerpt of what you said, and it may be sent to a clinician you have connected to and to the family contacts you have nominated for escalation. Once shared, that excerpt is also held in the recipient's record. See Section 8.

6.5 How to Turn AI Voice Calls Off

What changes when you switch it off. We stop placing AI calls to your telephone number. If you have the app installed with notifications enabled, medication reminders continue inside the app, including in-app AI calls. Switching off push notifications as well stops reminder calls on both channels. Withdrawing from voice calls does not delete calls that already happened.

Quiet hours. The quiet-hours setting in the app currently applies to notifications and to family escalation, but not to medication reminder calls, which are placed within the window of the dose they relate to. We are working toward bringing reminder calls under the same quiet-hours control.

We are also working toward a fail-safe default, so that a temporary outage of our preferences service cannot result in a call being placed to someone who has opted out. Today, that failure mode defaults to placing the call.

6.6 Retention and Deletion of Voice Data

• The working state of a live conversation is held in a temporary cache that expires 30 minutes after the call ends
• Deleting your account triggers a hard delete of your call records, transcripts, summaries, assistant-side recordings and extracted memory facts, alongside the rest of your data
• Transcripts of in-app calls that appear in your Health Companion chat history are deleted as part of the same account deletion
• Erasure runs across each store independently and on a best-effort basis. If you want written confirmation that every store has been cleared, email privacy@desha.ai and we will verify it and finish the job by hand where needed
• An excerpt already shared with a clinician or family contact through an escalation alert sits in their record and is handled under Section 8

6.7 Gaps We Are Working On

We would rather tell you what is not yet in place than imply it is. As at the date of this policy:

• The assistant does not yet announce at the start of a call that it is an AI and that the call is being transcribed and stored. We are building that spoken notice
• There is no separate consent step for AI voice calls, transcription and recording at sign-up. We are working toward one, with a record of when it was given
• The retention period for voice data is not yet fixed. See Section 6.6
• Data processing terms with the voice processors named in Section 6.3 are being put in place. See Section 6.3

If any of this matters to you now, you can switch AI voice calls off today using Section 6.5, and you can ask us to erase your voice data at any time at privacy@desha.ai.