Privacy Policy

01 Who We Are

LeviNote ("we", "us", "our") is an AI-powered clinical documentation tool designed to help healthcare providers generate professional session notes. Our service is accessible at levinote.com.

If you have any questions about this Privacy Policy, please contact us at privacy@levinote.com.

02 Information We Collect

We collect only what is necessary to provide and improve the Service:

• Account information — your email address and encrypted password when you register
• Session notes and history — the notes you generate and the form data you submit, stored and associated with your account
• Usage data — how you interact with the Service, including features used and frequency of use
• Payment information — processed securely by Stripe; we do not store your card details
• Uploaded documents — example documents you upload to guide note generation; these are processed in memory and not permanently stored

03 How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process your subscription and payments
• Send account-related emails such as confirmation, password reset, and billing notices
• Respond to your support requests
• Monitor and analyse usage to improve the Service
• Comply with legal obligations

We do not use your data to train AI models or share it with third parties for advertising purposes.

04 Patient Data and HIPAA

LeviNote is designed to assist with clinical documentation. We strongly advise against entering personally identifiable patient information (PII) — such as full names, dates of birth, or social security numbers — into the Service unless you have appropriate safeguards in place.

You are solely responsible for ensuring that your use of LeviNote complies with all applicable healthcare privacy laws in your jurisdiction.

05 Data Storage and Security

Your data is stored securely using Supabase, a trusted cloud database provider. We implement the following security measures:

• All data is encrypted in transit using TLS/HTTPS
• Passwords are hashed and never stored in plain text
• Row-level security ensures each user can only access their own data
• Access to production systems is restricted to authorised personnel only

While we take reasonable steps to protect your data, no system is completely secure. We encourage you to use a strong, unique password for your account.

06 Account Security and No Account Sharing

Your LeviNote account is personal and issued to you as an individual. To protect the privacy of your data and the integrity of the Service:

• You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account.
• Account sharing is prohibited. You must not share your account with any other person. Each user must have their own individual subscription.
• Activity monitoring. We may monitor account activity to detect unauthorized sharing or unusual usage patterns. This monitoring is conducted solely to ensure compliance with our Terms and to protect the security of the Service.
• Notify us immediately at support@levinote.com if you suspect unauthorized access to your account.

Sharing your account credentials may expose your patients' data and clinical notes to unauthorized individuals. We strongly encourage you to use a strong, unique password and to sign out when using shared devices.

07 Third-Party Services

We use the following third-party services to operate LeviNote:

• Supabase — database and authentication
• Anthropic — AI model powering note generation
• Netlify — website hosting and serverless functions
• Stripe — payment processing

Each of these providers has their own privacy policy and data handling practices. We encourage you to review their policies.

08 Cookies and Tracking

LeviNote uses minimal cookies necessary for the Service to function, including authentication session cookies. We do not use advertising cookies or third-party tracking pixels.

You can control cookies through your browser settings, though disabling certain cookies may affect the functionality of the Service.

09 Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your personal information and session history will be deleted within 30 days
• Anonymised usage data may be retained for analytics purposes
• Payment records may be retained as required by law

10 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request that inaccurate data be corrected
• Deletion — request that your data be deleted
• Portability — request your data in a portable format
• Objection — object to certain uses of your data

To exercise any of these rights, please contact us at privacy@levinote.com.

11 Children's Privacy

LeviNote is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

12 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice within the Service. Your continued use of LeviNote after changes are posted constitutes acceptance of the updated policy.