ANVAYAPrivacy Notice
How Anvaya handles user information, clinical documentation and related service data.
1. What Anvaya is
Anvaya is a clinical documentation and workflow service for authorised healthcare professionals and organisations. The scope of data processing depends on the features used and each healthcare provider's requirements. Anvaya does not replace a hospital's, clinic's or independent clinician's responsibility for the patient records they control.
2. Information that may be processed
- Account and identity: verified Google identity, email, professional role, organisation, access rights and profile information.
- Clinical information: patient identifiers, histories, examinations, investigations, diagnoses, procedures, medication details, notes and summaries entered by authorised users.
- Speech and AI material: recordings, dictated text, transcriptions and generated documentation where the relevant feature is enabled.
- Operational information: author and revision history, access events, audit records, security logs and technical feedback.
3. Purposes
Information may be used to authenticate users, enable clinical documentation and team workflows, provide optional transcription and AI drafting, preserve changes and provenance, support access administration, maintain security and address service problems. The information processed should be limited to what is reasonably necessary for these activities.
4. Control of clinical records
The hospital, clinic or treating practitioner ordinarily determines the permitted use and disclosure of patient records under their responsibility. Authorised users must follow relevant institutional policies. A platform operator or tester account does not itself confer a right to inspect identifiable patient records. A clinician's separate personal account does not automatically authorise copying records from a hospital.
5. AI and voice features
When enabled, speech and AI providers may process relevant audio or text to create transcriptions, notes and summaries. Outputs may contain errors and require review by the responsible healthcare professional. Supplier arrangements, data locations and retention practices may vary by deployment and are subject to further disclosure where applicable.
Clinical content should not be used for unrelated advertising, general model training or research merely because it is submitted through Anvaya. Any separate use requires appropriate authority and safeguards.
6. Supporting services and safeguards
Anvaya uses identity, hosting and storage services, and may use optional speech/AI processors according to its configuration. These services can involve third-party technology providers. We seek to maintain access restrictions, organisation separation, auditability and security practices appropriate to the system, but cannot promise perfect security or unverified certifications.
7. Retention and corrections
Clinical record retention and disclosure obligations are determined by applicable law and the responsible healthcare provider. Corrections, addenda and entries marked in error may preserve an audit trail rather than deleting the original history. Other categories such as session, operational and support information may be subject to different retention periods.
8. Privacy questions
For a patient's medical record or a clinical-data rights request, contact the hospital, clinic or treating professional responsible for that record. For institutional permissions, contact your administrator. For product assistance, see Help or the available in-product support path. Patient information will not be disclosed to an unverified requester.
9. Updates
We may revise this notice to explain changes to the service or to reflect further legal and contractual review. Material revisions will be dated, and applicable individual or institutional agreements continue to govern where relevant.