Privacy Policy

Effective Date: April 17, 2026

1. Introduction

Welcome to FreeDictate. FreeDictate is a HIPAA-compliant AI clinical documentation tool for therapists. We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

We collect the following information:

• Account Information: Your name and email address, collected via Google Sign-In (Google OAuth).
• Usage Analytics: Anonymous usage data collected through Google Tag Manager (GTM) and Google Analytics 4 (GA4). NO health or session data is collected or stored in our analytics.

3. How We Process Session Data

Your patients' privacy is our top priority:

• Recordings and transcripts are processed in memory only.
• Session data is NEVER stored on our servers or databases.
• Generated documents are delivered directly to you and are immediately discarded from our systems.
• No data from your sessions is ever used to train our AI models or any third-party models.

4. HIPAA Compliance and BAA

FreeDictate is designed to be HIPAA compliant. We offer Business Associate Agreements (BAAs) for users on our paid plans to ensure full compliance with healthcare regulations.

5. Google Sign-In and Third-Party Services

We use Google Sign-In for secure authentication. We also use hCaptcha for spam protection on our forms.

6. Cookies and Analytics

We use Google Tag Manager and GA4 to understand how visitors interact with our website. These tools may use cookies. We do not use cookies to track, collect, or store any Protected Health Information (PHI).

7. Data Security

We implement industry-standard security measures to protect your account information. Since clinical session data is processed purely in memory and never stored, the risk of data breaches involving PHI on our end is fundamentally eliminated.

8. Your Rights

Depending on your location, you may have rights under the GDPR, CCPA, or other privacy laws to access, correct, or delete your personal data (name and email). You can exercise these rights by contacting us.

9. Data Retention

We retain your account information as long as your account is active. We do not retain session data—it is discarded immediately after processing.

10. Contact Us

FreeDictate is part of the Therasoft family. If you have any questions about this Privacy Policy, please contact us at hello@freedictate.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page.