Privacy
Privacy policy
Last updated: October 2026. This is a translation; the Croatian version prevails.
This privacy policy describes how MedGlas processes data when you use the application for transcription and drafting clinical notes. MedGlas is intended for healthcare professionals and organisations that use it as an assistive tool in preparing medical documentation.
What data we process
The application may process account data, the user’s email address, audio recordings the user uploads, transcripts, note templates, generated note drafts, usage data and data needed for a clinic’s contracted access.
Purpose of processing
We process data to provide transcription and note drafting, authenticate users, prevent misuse, manage clinic access and improve the reliability of the service.
User responsibility and patient consent
The user, meaning the healthcare institution or practice that uses MedGlas, is responsible for the lawful basis of processing, informing the patient and obtaining consent where it is required. MedGlas does not replace a medical information system or the doctor’s professional judgement.
Special categories of data
Medical data may be a special category of personal data. We recommend not saying direct patient identifiers during a recorded conversation unless they are needed for the note draft, including name, national identification number, date of birth, address and similar data.
Subprocessors
MedGlas uses external providers for infrastructure, authentication, billing, transcription and note drafting. Terms for processing personal data are in place with the relevant providers, including obligations on confidentiality, security, subprocessors, data deletion, incident handling and international transfers where applicable.
Retention and deletion
Audio recordings are not kept after transcription. Transcripts and note drafts are permanently deleted automatically 24 hours after a record is opened, and the user can delete them sooner. Encrypted database backups are kept for at most one day, so deleted content also leaves the backups. If a recording cannot be uploaded, it is kept encrypted only in the browser on the user’s device until it is sent, and is deleted once sent, at sign-out or after 24 hours at the latest. Account, billing and usage data, without conversation content, is kept while the account is active and as long as legal obligations, security or billing require.
Security
All traffic between the browser and the application goes over HTTPS (TLS). The database is encrypted with AES-256 keys managed by AWS KMS. Recordings waiting to be sent are encrypted on the user’s device with an AES-256 key that is created in the browser and cannot be exported from it. To produce the transcript and note draft, MedGlas briefly processes the content on its servers and at its subprocessors. Access to the application is protected by user sign-in, and sensitive server keys are never sent to the browser. Users must keep their credentials safe and use the application only on devices and networks suitable for work with medical records.