🔒 Privacy Policy

Who we are

ClinicalWriterAI is a documentation assistance tool for healthcare professionals. It transforms informal observations into professionally structured medical documentation (SOAP, DAR, SBAR, or general medical style). This service is independently operated and self-hosted — your data is not stored on a third-party application platform.

What information we collect

Account information. When you create an account we store your name, email address, and a securely hashed version of your password. Passwords are never stored in readable form.

Preferences. Your chosen province, default output format, and default output language are saved so the tool works the way you like.

Rewrite history. The text you submit and the rewritten output are saved to your personal history so you can retrieve past work. Your history is visible only to your own account, and you can delete individual entries or your entire history at any time from the History page.

Session cookie. We use one essential cookie to keep you signed in. We do not use advertising cookies, analytics trackers, or third-party marketing tools.

How your text is processed

When you click "Rewrite Text", your input is sent securely to Anthropic's Claude API, the artificial intelligence service that performs the rewriting, and the result is returned to you. Anthropic processes this text as a data processor to provide the service. No other third party receives your text.

Important: patient information

ClinicalWriterAI is a writing aid, not a medical record system. Do not include information that directly identifies a patient (full name, health insurance number, date of birth, address) in the text you submit. Describe the situation without identifiers — for example "the patient" rather than a name. You remain responsible for complying with the confidentiality rules of your profession, your employer, and your province.

Data storage and security

All data is stored in a private database on our own Canadian web hosting. Protections include encrypted connections (HTTPS), hashed passwords, and protection against common web attacks (SQL injection, CSRF). Access to the database is restricted to the site administrator.

Your rights

You can view and delete your rewrite history yourself at any time. To correct your account information or permanently delete your account and all associated data, contact the site administrator and your request will be processed promptly.

Changes to this policy

If this policy changes, the date at the top of this page will be updated. Significant changes will be communicated to registered users.