Privacy Policy

1. Data We Collect

Clinic Translator is provided by Siranova Health. We collect your email address and account identifier to manage your account, and subscription and purchase records to provide paid features. We also process service usage counts and security records, such as sign-in activity, IP addresses and browser or device information.

When you use cloud translation, the audio and text you submit leave your device for speech recognition, translation and speech generation. This content may include health information. Cloud saving of consultations is disabled. Optional personal voice cloning sends a voice sample to ElevenLabs and creates a reusable voice profile; this differs from temporary session audio. A voice sample is personal data even when it contains no patient details. Record only your own voice, or a voice you have permission to use, and use a general script without patient information.

2. How We Use Your Data

Your account data is used to provide the translation service, manage your account, and send service-related communications. We use submitted speech and text to transcribe speech, translate conversations, provide consultation assistance and generate spoken output. A recorded voice sample is used to create a reusable personal voice; translated or typed text is then used to generate audio in that voice. Optional marketing measurement is described separately below.

3. Data Retention

Account and subscription records are retained to provide your account and paid features. Usage and security records are retained separately for service operation, security and applicable legal requirements. Voice profiles remain available for reuse until removed. Processing providers may have their own retention requirements; disabling cloud consultation storage does not mean that no data is collected off your device. Conversation history is held in app memory, while recordings and generated audio can remain in device cache. If you save a favourite, its text and copied audio are stored locally until you delete that favourite. A voice sample awaiting upload may also remain on your device for retry. Clearing conversation history does not necessarily remove cached files, saved favourites or provider-held voice profiles.

4. Third-Party Services

Microsoft Azure: Our backend is hosted on Azure. Microsoft Azure Speech receives microphone recordings or imported audio for transcription and text for standard speech generation. Microsoft Azure OpenAI receives typed text and transcripts for translation and consultation assistance. This content may include personal and health information if you include it. Our Azure resources are in UAE North, but our Azure OpenAI models use GlobalStandard deployments, which can process inputs and outputs outside the UAE.

ElevenLabs: When you create a personal voice, ElevenLabs receives the recorded sample to create and retain a reusable voice profile. When you select a saved ElevenLabs clone, our backend sends the text to be spoken and the voice identifier to ElevenLabs to generate audio in that voice. This speech-generation feature is enabled; ElevenLabs is not used only to create the clone. Generated text can contain personal or health information if you include it. Standard Azure voices use Microsoft Azure Speech instead.

Your permission: Updated app versions present a provider-specific AI data-sharing notice before protected screens can process content. In those versions, declining prevents translation and voice creation; permission is requested when a protected screen opens, and returning to an already open screen retains that choice until it closes. Microphone permission is a separate operating-system control and does not by itself explain or replace permission to share data with AI providers. Obtain permission from other participants before recording them. Stop recording and close the protected screen to end that screen visit; you can decline when it is opened again. Turning off microphone permission prevents new microphone recordings but does not erase data already submitted or prevent typed-text processing after consent.

Other service providers: RevenueCat processes account identifiers and purchase history to manage subscriptions. Resend delivers account and support emails using the recipient address and message content. Avoid including clinical information in support enquiries.

Microsoft's Data Protection Addendum governs its processing of customer data. Azure OpenAI inputs and outputs are not provided to OpenAI and are not used to train foundation models without permission or instruction. Service abuse monitoring and deployment location can affect retention and where processing occurs.

ElevenLabs' Data Processing Addendum includes processing instructions, confidentiality, security, breach notification and data-rights assistance. Its Zero Retention Mode requires an eligible Enterprise account and does not cover voice-cloning samples. Our speech requests disable provider logging where supported, but this flag alone does not establish account-level Zero Retention. ElevenLabs may use submitted content for model improvement depending on the account's data-use settings and agreement. We have not verified a production-account training opt-out or Enterprise Zero Retention entitlement, so we do not promise either protection. Voice samples and profiles have different retention from temporary speech-generation requests.

Optional Meta measurement uses device or app identifiers and app activation events. The active RevenueCat integration can send subscription events to Meta for advertising measurement. These providers may process data outside the UAE. Clinical audio and translation content are not included in our Meta measurement integration.

5. Security and clinical content

Production requests use encrypted connections. Our application disables cloud consultation storage and avoids logging raw clinical audio and text. Only submit content that you are authorised to process, and avoid unnecessary patient identifiers.

Account and data deletion

To request deletion of your Clinic Translator account, use Delete account in the app, or email info@clinictranslator.com from your account email address with the subject “Clinic Translator account deletion”. You can make the email request without installing or signing in to the app. Do not send passwords or clinical records.

An in-app request deactivates the account and revokes its sessions while our team processes deletion. Account deletion removes the account record, associated usage records and stored voice-profile links from our application database. Ask our team to remove provider-held voice profiles and subscription customer data as part of your request. Security or transaction records that must be retained for legal, fraud-prevention or accounting purposes are handled separately; our team will explain any applicable retention when responding to your request. Deleting an account does not cancel an App Store or Google Play subscription; manage cancellation in your store account.

Optional mobile advertising measurement

In the mobile app, open Advertising privacy to allow or decline tracking. Meta identifier collection and app activation measurement are enabled only after this choice is allowed; on iOS, Apple's tracking permission is also required. Declining does not prevent voice translation or purchases. Automatic Meta app and purchase logging is disabled; RevenueCat handles subscription-event delivery separately.

Withdrawing consent disables future on-device advertising identifier collection and clears the Meta identifier attached through the app's RevenueCat integration. It does not retract previously delivered events or automatically cancel server-side subscription events. Contact us for deletion requests concerning previously processed data.

6. Contact

For data requests or privacy concerns, email info@clinictranslator.com.

7. Optional marketing measurement

The public landing page offers three choices: essential cookies only, analytics, or analytics and advertising. Declining does not affect account creation or voice translation. Your choice is stored for 90 days. If you allow analytics, a pseudonymous browser identifier and reviewed campaign labels are stored for up to 30 days.

With permission, Google Analytics measures public-page visits and selected actions. An optional server-side event measures successful account creation when configured. Configured advertising tags from Google, Meta and LinkedIn load only with advertising permission on the public landing page. These providers may process browser information and identifiers outside the UAE. They are not loaded on account, admin or translation screens by this marketing integration.

The marketing events do not include names, email addresses, form messages, account IDs, clinical text, transcripts or voice recordings. Contact enquiries are sent separately to our team through our email provider; please do not include patient details or medical records.

Change your privacy choices. Withdrawing consent stops future optional tracking; it does not automatically erase information already processed by a provider.