Privacy Policy

Who we are

Nutrolis AI Scriber (“Nutrolis”, “we”, “us”) is a clinical documentation assistant for registered medical practitioners. This policy applies to our website at nutrolis.com, our web application, and our Android application.

For questions or complaints, contact our Grievance Officer at privacy@nutrolis.com. We aim to respond within seven working days.

Who is responsible for patient data

This distinction matters and we want to state it clearly.

When you use Nutrolis to document a consultation, the patient information involved belongs to the relationship between you and your patient. Under India’s Digital Personal Data Protection Act, 2023, you are the Data Fiduciary for that information. Nutrolis acts as a Data Processor, handling it strictly on your instructions and for the purpose of producing your clinical note.

We do not use patient information for any purpose of our own. We do not sell it, rent it, share it with advertisers, or use it to build a separate product.

Audio recordings: we do not keep them

This is the most important paragraph in this document.

When you record a consultation, the audio is captured on your device. When you stop recording, it is transmitted once, over an encrypted connection, to our server. Our server holds it in memory only, passes it to our transcription provider, and receives text in return. The audio is then discarded.

Consultation audio is never written to disk, never placed in cloud storage, and never retained by Nutrolis. There is no archive of recordings. We cannot listen to your consultations, and neither can anyone who obtains access to our systems, because the recordings do not exist.

What we do collect and keep

Account information

Your name, email address, medical specialty, registration number, clinic name, clinic address, clinic phone number, preferred language, and notification email address. If you sign in with Google, we receive your name and email address from Google. We never receive or store your Google password.

Consultation records

For each consultation you create, we store: the patient’s name, age, and gender as you enter them; the consultation type and duration; the text transcript; the draft SOAP note; the plain-language patient summary; the prescription; and a confidence score.

Technical information

Standard server logs, including IP address and browser type, retained for security and debugging. We do not use advertising trackers or third-party analytics that profile you across the web.

How your data is protected

Data is encrypted in transit using TLS and encrypted at rest by our database provider.

Access control is enforced at the database level, not merely in application code. Every consultation record is bound to your account identifier through row-level security policies. A defect in our web application cannot expose another doctor’s records, because the database itself will refuse the query. Nutrolis staff do not browse consultation content.

Who else processes your data

We would rather name these companies than have you discover them later. Each receives only what it needs, and none of them are permitted to use your data to train their models.

• Supabase — database, authentication, and account storage. Receives your account information and consultation records.
• Deepgram — speech recognition. Receives consultation audio and returns text. Does not retain the audio.
• Anthropic — language model that drafts the note. Receives the text transcript and returns the draft note, summary, and prescription.
• Resend — email delivery. Receives the recipient address and the PDF, only when you choose to send an email.
• Netlify — application hosting.
• Google — only if you use Google Sign-In, and only for authentication.

WhatsApp sharing works by opening WhatsApp on your device with text you have already approved. Nutrolis does not send anything to WhatsApp on your behalf and has no integration with Meta.

How long we keep things

• Consultation audio: not retained.
• Consultation records: until you delete them, or until you delete your account.
• Account information: until you delete your account.
• Server logs: up to 30 days.

When you delete a consultation, it is removed from our database. When you delete your account, every consultation belonging to it is removed with it. Encrypted backups are rotated out within 30 days.

Your rights

Under the Digital Personal Data Protection Act, 2023, and comparable laws elsewhere, you may:

• Ask what personal data we hold about you.
• Ask us to correct anything inaccurate.
• Delete your consultations, individually or entirely.
• Delete your account and everything attached to it.
• Ask for a copy of your data in a portable format.
• Withdraw your consent and stop using the service.
• Raise a grievance with us, and escalate it to the Data Protection Board of India if you are not satisfied with our response.

You can delete individual consultations at any time from History inside the app. For full account deletion, email privacy@nutrolis.com from your registered address and we will complete it within 30 days.

Your responsibilities as a clinician

Nutrolis gives you the tools. Two things remain yours.

Inform your patient that the consultation is being recorded and obtain their consent before you begin. This is both a legal requirement in most circumstances and, we would argue, a matter of basic respect.

Review every note before you approve it. Nutrolis produces a draft. You are the clinician, and clinical responsibility for the content of the record remains entirely with you.

Children

Nutrolis AI Scriber is intended for use by registered medical practitioners aged 18 and above. We do not knowingly create accounts for children. Consultation records may of course concern paediatric patients, and are handled exactly as any other consultation record is.

Not a medical device

Nutrolis AI Scriber is a documentation assistant. It does not diagnose, treat, cure, or prevent any disease or condition, and it is not a substitute for clinical judgement.

Changes to this policy

If we change how we handle your data in a way that matters, we will tell you by email before the change takes effect, not merely by updating the date at the top of this page.

Contact

Grievance Officer, Nutrolis
Email: privacy@nutrolis.com
New Delhi, India