Privacy

Where your data actually goes

Last updated August 2026 · Written in plain English on purpose

Soundnote handles consult audio and clinical notes, so this page says plainly what stays on your device, what leaves it, which companies receive it and where they are. This page is the current privacy policy for Soundnote. The signed-in app repeats the same data-flow summary on its About screen.

What we do not claim

Some scribes say "nothing identifiable ever leaves your device". That is not true of any scribe that uses a speech engine, including this one. The audio leaves. What we do is strip the patient's identity from the transcript before the note-writing AI sees it, and re-insert it only locally, on your screen. We would rather describe that exactly than sell you a slogan.

What stays on your device

  • The patient's name, if you use the optional name chip, is stored only in the browser on the device you typed it on. It is never sent to our servers, never written into the note, and never included in a prompt.
  • Because it is per-device, it does not follow you to another computer. That is the cost of keeping it local, and we accept it deliberately.

What leaves, to whom, and where they are

  • Audio, for transcription. Speech-to-text is the one hop no scribe can avoid, because the audio itself has to be heard by a machine. We send live consult audio to Deepgram using their Australian (Sydney) endpoint with cross-border processing opted out. We have configured it that way and are seeking written confirmation from Deepgram of exactly what that covers, so treat it as our configuration rather than a guarantee we can yet evidence.
  • Audio on the backup path. If the live connection drops mid-consult, or when you upload an audio file instead of recording, transcription runs on Cloudflare Workers AI instead. That path is not region-pinned, so that audio may be processed outside Australia. Removing this dependency is on our roadmap.
  • De-identified text, for writing the note. The note-writing and safety-check calls go to Anthropic in the United States. They only ever receive de-identified text.
  • Your saved consults. Stored with Supabase in Australia (Sydney) and scoped to your account. One clinician can never see another's data.
  • This website's fonts. These pages load web fonts from Google Fonts, which means your IP address and browser reach Google. No cookies are set.

Overseas disclosure

Under Australian Privacy Principle 8 we tell you which countries your information may reach. De-identified clinical text goes to the United States (Anthropic). Audio on the backup and upload paths may be processed outside Australia (Cloudflare). Live consult audio and your stored consults are the hops we keep in Australia. We do not claim that all processing stays here, because it does not.

De-identified clinical text is still personal information under the Privacy Act while re-identification remains reasonably possible, and it does remain possible, because you re-identify it locally by design. We treat it that way rather than claiming the exemption. De-identification is a real and meaningful protection, but it is best-effort, not a guarantee.

How long anything is kept

You choose how long consults are kept: 1, 7, 14 or 30 days. After that they are deleted automatically. Audio is never part of that, because audio is never stored in the first place, and identifiable transcripts are never stored at all. You can delete your account and everything in it from your profile at any time, immediately and permanently.

Tracking

This website sets no cookies and runs no analytics. The signed-in app records page URL and load timings only: no consult content, no cookies, no advertising identifiers, and nothing that follows you to another site.

Your responsibilities as the treating clinician

You remain responsible for the clinical record. Obtain the patient's consent before recording, and review and correct every generated document before it enters your practice software. Soundnote drafts; you decide.

Access, correction and complaints

You can ask us what personal information we hold about you, ask us to correct it, or complain about how we have handled it. Contact Enkidu Labs through the Enkidu Labs contact page and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Soundnote is operated by Enkidu Labs Pty Ltd (ACN 701 159 793), an Australian company.