You decide what to record
Recording starts only when you start it. Always follow the rules and expectations that apply where the conversation takes place.
Private by design, understandable by patients.
This page explains the product safeguards in plain language. The Privacy Notice remains the authoritative description of personal-data processing.
Raw audio is temporary
A paused draft stays locally on your device. During cloud transcription, raw audio is temporary; after successful processing Anduine keeps the privacy-redacted transcript and redacted audio needed for the visit memory and removes the raw cloud upload.
AI is constrained to the task
Visit memories and Ask About Visit are grounded in the privacy-redacted transcript. Anduine is not intended to diagnose, triage, prescribe or invent treatment advice.
Care Circle access is explicit
Trusted people sign in separately. View-only and helper permissions are enforced by the server; information outside a person’s permission is not merely hidden in the browser.
Temporary shares are encrypted before upload
The browser encrypts the selected snapshot. The decryption key stays in the URL fragment and is not sent to the Anduine share API. Shares expire and can be revoked.
You can remove your data
You can delete an individual visit, export your account data, withdraw health-data consent, or delete the account. Some processors may retain limited security or billing metadata under their contractual rules.
Who processes data?
Anduine uses Supabase for authentication/data storage, Vercel for the web service, AssemblyAI’s EU endpoint for speech-to-text and automated PII redaction, and the OpenAI API for the AI organization features you invoke. The exact purposes, locations, retention limits and transfer safeguards are described in the Privacy Notice.
Read the Privacy Notice · Security and vulnerability reporting