Last Updated: May 21, 2026
This Privacy Policy is incorporated by reference into the MediSummary Terms of Service. It explains how MediSummary ("Company," "we," "us," "our") — a product of ODAKCO, LLC — collects, uses, discloses, and processes your personal information when you:
By accessing or using our Services, you agree that you have read, understood, and accept our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree, you must not use our Services.
If you have any questions or concerns about this policy or our practices, please contact us at:
Email: [email protected] Address: MediSummary (ODAKCO, LLC) 1111B S Governors Ave, STE 7896 Dover, DE 19904
MediSummary is a U.S.-based organization under ODAKCO, LLC, focused on helping physicians and healthcare professionals work more efficiently. Our AI-powered platform includes tools for paper summarization, audio recaps, AI-powered clinical note-taking, presentation generation, literature review, study mode, quick research discovery, an English coaching feature, and a 16-week specialty learning accelerator, among others.
For users located in the European Economic Area ("EEA"), the legal entity responsible for processing your personal data (i.e., the "data controller" under the General Data Protection Regulation or "GDPR") is ODAKCO, LLC.
We collect both personal information (information that identifies you or makes you identifiable) and non-personal information (information that does not identify you directly).
You may provide personal information in various ways:
The AI Note Taker is designed to assist healthcare professionals with clinical documentation, including SOAP notes and patient encounter summaries. When you use this feature, we collect:
Your responsibilities as the clinician: As the healthcare professional using this tool, you are the legally responsible party in your patient relationship. You are responsible for obtaining any patient consent required by applicable law before recording any clinical interaction. MediSummary does not manage or obtain patient consent on your behalf.
HIPAA and equivalent regulations: If you are a covered entity or business associate under HIPAA (or subject to equivalent regulations in your jurisdiction) and wish to use the AI Note Taker in contexts involving Protected Health Information (PHI), please contact us at [email protected] to discuss a Business Associate Agreement (BAA). Using the feature without a BAA where one is legally required is your responsibility.
Audio retention: Voice recordings are transmitted to third-party AI transcription providers (such as Deepgram) for processing. By default, recordings are retained in encrypted private storage so you can replay and re-transcribe them. Retention is user-controlled in settings (keepAudio). If you disable retention, audio is deleted immediately after transcription. Audio is also deleted when you delete the note or close your account. Transcribed text and structured notes are retained in your account until you delete them or close your account.
When you use the MediSummary mobile app, we collect and process the following:
When you use or access our Services, we automatically collect certain information about your device and usage:
The following applies to our website only, not the MediSummary mobile application.
We use cookies, web beacons, and similar technologies on our website to provide, customize, and improve our Services. Cookies are small text files stored on your device to help websites remember information about you.
Analytics and Session Recording: We use the following third-party analytics and product improvement tools, which may collect behavioral data about how you interact with our site:
These tools load on the website only after you accept analytics or advertising cookies in our consent banner (or if you later change that choice). Essential cookies needed to run the site do not require that consent. These tools are not used in the mobile app.
We process your personal information for the following purposes:
Service Provision and Account Management
AI Feature Processing
Customer Support and Communication
Service Improvement and Analytics
Marketing and Promotional Activities
Legal Compliance and Protection
If you are in the EEA, we rely on the following legal grounds for the processing of your personal information:
To deliver AI-powered features, MediSummary sends certain user-submitted content to third-party AI providers. This may include:
These providers — which may include companies such as OpenAI, Anthropic, Google, and Deepgram (for speech-to-text transcription of voice notes) — process your data under their own terms of service and privacy policies. MediSummary configures these integrations to minimize data retention by these providers where possible, but we cannot guarantee their data handling practices. By using AI-powered features, you consent to your content being processed by these providers.
We recommend you do not submit content containing personally identifiable patient information to any AI feature.
We may share your personal data with:
Service Providers — Third parties that help us operate our business and Services. These providers process data only as instructed and on our behalf. Current subprocessors include:
AWS, DigitalOcean, MongoDB, Deepgram, and Google Gemini may receive health-related content you upload (papers, notes, or audio). That content can be special-category data under GDPR Article 9. We process it to provide the Service you request. Do not upload identifiable patient information unless you have a lawful basis and, where required, a BAA with us.
Third-Party AI Providers — As described in Section 5 above.
Business Transfers — In connection with any merger, sale of assets, financing, or acquisition of all or a portion of our business by another company.
Legal Requirements — If required by law or to protect our rights, property, or safety (e.g., responding to court orders or law enforcement requests).
Affiliates — We may share information with our corporate affiliates, but only if necessary and consistent with this Privacy Policy.
We do not sell or rent your personal information to third parties for their own marketing purposes.
We retain your personal information for as long as needed to:
Voice recordings from the AI Note Taker are retained in encrypted private storage by default so you can replay and re-transcribe them. You can turn retention off in settings; if you do, audio is deleted immediately after transcription. Audio is deleted when you delete the note or close your account. Transcribed text and structured notes are retained as part of your account until you delete them or close your account.
When we no longer require your personal data for these purposes, we will securely delete or anonymize it.
We have implemented commercially reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Payment data is processed exclusively through Stripe on our website and is not stored on MediSummary servers. Authentication tokens in the mobile app are stored using your device's secure storage APIs. However, no internet-based service can be completely secure. Therefore, we cannot guarantee absolute security of your information.
If you use our Services from outside the United States, be aware that your information may be transferred, stored, or processed in the United States or other jurisdictions where our service providers are based. These countries may not have the same data protection laws as your home country. If required by applicable law, we implement appropriate safeguards (such as Standard Contractual Clauses) to ensure your personal information remains protected.
Our Services are not directed to, nor do we knowingly collect information from, children under 18. If we discover that we have inadvertently collected personal information from a child under 18, we will take appropriate measures to promptly delete such information.
Depending on your location, you may have certain rights regarding your personal information, including the right to:
To exercise any of these rights, submit a request at /privacy-request or email [email protected]. Website users can delete their account from Account settings. Mobile app users may also delete their account from Settings → Delete Account in the app. We will respond to your request in accordance with applicable data protection laws.
If you are a California resident, you are granted certain rights regarding access to your personal information under the California Consumer Privacy Act ("CCPA") and California's "Shine the Light" law. These may include:
For any such requests, use /privacy-request, the Do Not Sell or Share page, or email [email protected]. Note that some information may be exempt from these requests under state law.
Most browsers include a "Do Not Track" (DNT) feature. We treat a Global Privacy Control (GPC) signal as a request to opt out of sale or sharing of personal information for advertising. When GPC is present we do not load Meta Pixel or other advertising cookies. You can also use /do-not-sell or the cookie banner to make the same choice.
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we do, we will notify you (e.g., by posting a notice on our site or sending you an email). Your continued use of our Services after those changes become effective indicates that you have read, understood, and agreed to the current version of this Privacy Policy.
If you have questions, concerns, or comments about this Privacy Policy or our data practices, please contact us:
Email: [email protected] Mailing Address: MediSummary (ODAKCO, LLC) 1111B S Governors Ave, STE 7896 Dover, DE 19904