Privacy Policy - OrthoVault

Last Updated: August 2026

1. Overview

OrthoVault is a personal patient record-keeping app for orthopaedic surgeons. We are committed to protecting your privacy and the privacy of your patient data. This Privacy Policy explains how we collect, use, and protect your information.

2. Data We Collect

Patient Data

• Case information (diagnosis, findings, investigations, procedures)
• Medical photos and documents
• Prescriptions and treatment history
• Follow-up dates and outcomes
• All stored locally on your device by default

Account Data

• Email address (for authentication)
• Name and clinic details (for profile and prescriptions)

Cloud Sync Data (AI Tier Only)

• Encrypted patient records synced to Firebase Firestore
• Only when explicitly enabled by the user
• Multi-device synchronization only

Google Drive Backup (Pro+ Tier)

• Backup files uploaded to your personal Google Drive account
• Only accessible by you

3. Data Storage & Security

Local Storage

All patient data is stored on your device by default. No data leaves your device unless you enable cloud sync. Data is stored in app's local database (IndexedDB).

Cloud Storage (Firebase)

When cloud sync is enabled (AI tier only), data is encrypted in transit and at rest. Stored in Firebase Firestore (Google Cloud). Subject to Google's data protection policies.

Google Drive Storage

Backups stored in your own Google Drive account. Only you have access to your backups. Subject to Google's data protection policies.

4. Third-Party Services

We use the following third-party services:

Firebase (Google Cloud)

• Purpose: Authentication, cloud database, cloud storage
• Data: Patient records, user profile (AI tier only)
• Privacy: firebase.google.com/support/privacy

Google Drive API (Google)

• Purpose: Backup and restore functionality
• Data: Backup files
• Privacy: google.com/policies/privacy

Claude API (Anthropic)

• Purpose: AI clinical assistant and suggestions
• Data: Case information, patient queries (sent for analysis, not stored)
• Privacy: anthropic.com/privacy

Gemini API (Google)

• Purpose: AI suggestions and quick-fill
• Data: Case information, patient queries (sent for analysis, not stored)
• Privacy: ai.google.dev/privacy

5. No Tracking or Ads

• OrthoVault does not use analytics or tracking cookies
• We do not display advertisements
• We do not sell, trade, or share your data with third parties
• We do not use your data for marketing purposes

6. Data Retention

• Local Data: Stored until you delete it
• Cloud Data: Stored as long as your account is active (AI tier)
• Backup Data: Stored in your Google Drive (you control deletion)
• AI Queries: Claude/Gemini responses are not stored; queries are discarded after processing

7. Your Rights

You own all your data. You have the right to:

• Access: Export all your data anytime from within the app
• Delete: Delete cases and data permanently
• Backup: Create backups to Google Drive or export locally
• Portability: Export your data in standard formats (CSV, ZIP)

8. Patient Privacy & Compliance

Important: As a healthcare provider, you are responsible for:

• Maintaining patient confidentiality and privacy
• Complying with local medical regulations (HIPAA in the US, GDPR in EU, etc.)
• Obtaining appropriate patient consent for data collection and storage
• Securing your device and access credentials
• Reporting data breaches to appropriate authorities if required

9. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

Email: support@orthovault.app