Privacy Notice for the Nabu-Med App
This notice applies to the "Nabu-Med Medical Scribe" app for iPhone, iPad and Android. It supplements our privacy policy.
Who is responsible
The app is a tool for medical practices. We process recordings, transcripts, reports and patient data on behalf of your practice (Art. 28 GDPR); the practice is the controller of these data and has concluded a data processing agreement with us.
For your user account and the technical operation of the app, the controller is emergo technologies GmbH, Egger-Lienz-Straße 116, 6020 Innsbruck, Austria (email: office@emergo.dev).
What data the app processes
Audio recordings of the conversation – only when you start a recording; the microphone is not active otherwise.
Transcripts and reports created from the recording. They usually contain health data (Art. 9 GDPR).
Patient details such as name and date of birth when you assign a patient to a session, and notes you write.
Account data: your name and email address for signing in.
The app uses no advertising, no tracking and no third-party analytics or crash reporting services. Location, contacts and photos are not accessed.
On the device
Until they are uploaded, recordings are kept in the app's protected storage – also without an internet connection – and are excluded from device backups. Once the server has processed a recording, the app deletes the copy on the device.
Your sign-in is kept in the Keychain (iOS) or Keystore (Android) until you sign out.
Transfer and processing
The app transfers data only encrypted (TLS) to the Nabu-Med servers, operated by Hetzner Online GmbH in Germany.
For transcription and report generation we use speech recognition and language model services that your practice sets in its settings. Services processing outside the EU are marked in the application and used only if your practice selects them. The sub-processors are listed in the data processing agreement with your practice.
Retention
How long sessions, recordings and reports are kept is set by your practice. Sessions can be deleted in the app and in the web application.
Permissions
Microphone: to record the conversation. A running recording continues while the screen is locked; it starts only when you start it and is shown in the app.
Your rights and your account
As a patient, please contact your practice about your data. As a user of the app, you have the rights of access, rectification, erasure, restriction, data portability and objection; please write to support@nabu-med.at.
User accounts are managed by your practice. An account is deleted by your practice's administrator, or by us on request to support@nabu-med.at.
You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).