Privacy Policy

Last updated: July 21, 2026

In one sentence: ScribeOath does its work, transcription and note drafting, entirely on your device. Your recordings, transcripts, and notes are never sent to us or to any AI company. We run no servers that receive your data, and we have no way to read your notes.

ScribeOath ("ScribeOath", "the app", "we") is a documentation tool for clinicians. This policy explains what the app does with information, and, more importantly, what it deliberately does not do. It is written to match how the app actually works, not to cover us with vague language.

Our core principle: on-device by design

ScribeOath is built to keep clinical information on the clinician's own device:

Audio is captured and transcribed by Apple's on-device speech engine. It is stored encrypted on your device and, by default, deleted after you approve the note. It is never uploaded.
Notes are drafted by Apple Intelligence running on your device. Your audio and transcripts are never sent to OpenAI, to us, or to any other AI provider.
Patient details, transcripts, and notes are stored in an encrypted database on your device, protected by iOS/macOS Data Protection.
ScribeOath has no user accounts and no login. We operate no servers that receive your clinical data.

What leaves your device, and what doesn't

Your recordings, transcripts, and notes stay on your device. They are never transmitted to us or to any third party for processing. There are only two exceptions, both under your control and both bypassing us entirely:

iCloud Sync (off by default). If you turn it on, your patients, sessions, and notes are stored in your own private iCloud account so they appear on your other Apple devices. This uses Apple's iCloud under your Apple Account, we never see this data. Audio recordings are never synced; they remain only on the device that captured them. For the strongest protection, enable Apple's Advanced Data Protection in your iCloud settings.
Purchases. Subscriptions are processed by Apple. We may use a subscription-management service to know whether a subscription is active; it receives only an anonymous, app-generated identifier and purchase status — never your recordings, notes, or any patient information.

Information we (the developer) receive

Essentially none of your content. We do not collect your recordings, transcripts, notes, or patient information, the architecture above means we cannot. We do not use third-party analytics or advertising SDKs that access your content. If we collect anything, it is limited to anonymous, aggregate app-health metrics (for example, crash counts) that contain no personal or patient information and cannot be tied to you or a patient.

Consent and clinical responsibility

ScribeOath requires you to confirm patient consent before every recording; the attestation is logged with the encounter on your device. ScribeOath is a documentation assistant, not a medical device, and does not provide medical advice or diagnoses, every note must be reviewed and approved by you before use. Because your data stays on your device (and your own iCloud, if enabled), you remain the controller of your patients' information and are responsible for your own professional and legal obligations, including any that apply where you practice (such as HIPAA, GDPR, or KVKK). This policy is not legal advice.

Security

On-device data is encrypted with iOS/macOS Data Protection.
An optional Face ID / Touch ID lock protects the app; biometric data is handled entirely by Apple and never seen by us.
Audio is deleted automatically according to the retention setting you choose (by default, after you approve the note).

Your control and your rights

Because your data lives on your device, you control it directly: edit or delete any patient, session, transcript, note, or recording at any time inside the app, and turn iCloud Sync on or off whenever you like. Deleting the app removes its on-device data. Where laws such as the GDPR, CCPA/CPRA, or KVKK grant rights over personal data, note that we hold no personal data about you to access, correct, or delete, it never reaches us.

Children

ScribeOath is a professional tool intended for clinicians and is not directed to children.

Changes to this policy

If the app's data practices change, for example, if an optional cloud feature is ever introduced, we will update this policy and its effective date, and disclose the new data flow clearly in the app before you use the feature.

Contact

Questions about privacy? Email support@scribeoath.com. Governing law: the laws of the Republic of Türkiye.