Privacy Policy

1. Introduction

Lisenr ("we," "our," or "us") is a product of Button Health, operating in Ontario, Canada. We are committed to protecting your privacy and the confidentiality of your personal information, including personal health information ("PHI").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered medical transcription service. We comply with the Personal Health Information Protection Act, 2004 (PHIPA) of Ontario and the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Authentication credentials (managed securely through our authentication provider)
• Professional information (if provided)

2.2 Audio Recordings and Transcriptions

When you use our service, we process:

• Audio recordings of clinical encounters that you choose to upload or record
• Transcriptions generated from those recordings
• Clinical notes generated from transcriptions (e.g., SOAP notes)

2.3 Usage Information

We automatically collect certain information about your use of the service, including:

• Device and browser information
• IP address and general location
• Usage patterns and feature interactions

3. How We Use Your Information

We use your information to:

• Provide and maintain our transcription and documentation services
• Process audio recordings and generate clinical notes
• Improve our AI models and service accuracy (using de-identified data only)
• Communicate with you about your account and service updates
• Ensure the security and integrity of our services
• Comply with legal obligations

4. Personal Health Information (PHI)

We understand that audio recordings and transcriptions may contain personal health information. We treat all such information with the highest level of care and in accordance with PHIPA requirements:

• PHI is only collected with your explicit consent
• PHI is used solely for the purpose of providing our transcription services to you
• PHI is not disclosed to third parties except as necessary to provide our services or as required by law
• We implement appropriate safeguards to protect PHI from unauthorized access, use, or disclosure
• You retain ownership of all PHI processed through our service

5. Data Storage and Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Secure cloud infrastructure with access controls
• Regular security assessments and updates
• Employee training on privacy and security practices

Your data may be stored on servers located in Canada and/or the United States. We ensure that any cross-border data transfers comply with applicable privacy laws.

6. Third-Party Services

We use trusted third-party service providers to help deliver our services:

• Authentication: We use Clerk for secure user authentication
• Speech Recognition: We use AssemblyAI for audio transcription
• AI Processing: We use various AI providers for note generation
• Cloud Storage: We use secure cloud providers for data storage

These providers are contractually bound to protect your information and use it only for the purposes of providing their services to us.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You may delete your recordings and transcriptions at any time through your account settings. Upon account deletion, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal purposes.

8. Your Rights

Under PHIPA and PIPEDA, you have the right to:

• Access your personal information and PHI held by us
• Request correction of inaccurate information
• Withdraw consent for the collection, use, or disclosure of your information
• Request deletion of your personal information
• File a complaint with the Information and Privacy Commissioner of Ontario

To exercise these rights, please contact us using the information provided below.

9. Cookies and Tracking

We use essential cookies to maintain your session and provide our services. We do not use tracking cookies for advertising purposes. You can control cookie settings through your browser.

10. Children's Privacy

Our service is intended for use by healthcare professionals and is not directed at children under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

13. Regulatory Information

For complaints or inquiries regarding your privacy rights, you may also contact: