Privacy Policy

TextRad ("we", "our", or "us") provides AI-powered speech-to-text assistance for radiology reporting and documentation through our web app (textrad.in), our desktop apps for Mac and Windows, our browser extension and our iOS app. This Privacy Policy explains what information we collect, how we collect it, how we use it, which third parties process it and how we protect it, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP).

1. What Data We Collect

2. How We Collect Data

• Directly from you: when you sign in, record a dictation (only after you press record), type or edit text, import a template, change your preferences or ask a question.
• From sign-in providers: Google and Apple share your name and email address with us when you choose to sign in with them.
• Automatically: device information, usage statistics and crash logs are collected when you use TextRad.
• From payment providers: Apple and Razorpay confirm the status of your purchases and subscriptions.

3. What We Do NOT Collect

• ❌ No patient images
• ❌ No PACS access
• ❌ No radiology data mapping
• ❌ No EMR / hospital system access
• ❌ No biometric identity data

4. How We Use Data

We use your data to:

• Transcribe your dictation into text
• Generate and format radiology reports from your transcribed findings and chosen template
• Proofread reports and suggest improvements with TextRad IQ
• Answer the questions you ask in Ask GPT
• Store your reports, templates and preferences and sync them across your devices
• Manage your account, trial, subscription and usage limits
• Send service emails such as welcome, trial and subscription notices, and occasional product updates (you can unsubscribe from product updates at any time)
• Secure our systems, prevent abuse and troubleshoot errors
• Provide customer support
• Improve reliability and accuracy using usage statistics and error logs

✓ We do not sell, rent, or trade your data, and we do not use it for advertising.

5. Third-Party AI Processing

TextRad's transcription, report generation, TextRad IQ and Ask GPT features are powered by third-party AI providers. To provide a feature, our servers on Google Cloud (Firebase) send only the content that feature needs to the provider over an encrypted connection. The provider processes it on our behalf and returns the result to TextRad.

What is sent, by feature

The AI providers we use

• OpenAI, L.L.C. (United States) — main provider for speech-to-text, report generation, TextRad IQ and Ask GPT
• Groq, Inc. (United States) — backup speech-to-text
• Deepgram, Inc. (United States) — backup speech-to-text on the web and desktop apps
• Google LLC, Gemini API (United States) — backup speech-to-text on the web and desktop apps

How these providers protect your data

• OpenAI does not use data sent through its API to train its models. It may keep it for up to 30 days to monitor for abuse, and then deletes it unless the law requires otherwise.
• Groq does not retain inference data by default. It may keep logs for up to 30 days to investigate reliability problems or suspected abuse.
• Deepgram and Google are used only as backup speech-to-text on the web and desktop apps, and process audio under their own API terms to return a transcript to TextRad. They are not used by the iOS app.
• OpenAI and Groq, the providers used by the TextRad iOS app, process the data on our behalf under their API terms and data processing commitments, use encryption in transit and at rest, and protect the data with safeguards equal to those described in this policy.

Your permission

In the TextRad iOS app, we show you what is sent and who receives it, and ask for your permission before any of this data is first sent. Nothing is sent until you tap Allow. You can withdraw your permission at any time in Settings → AI Data Sharing. Dictation, report generation, TextRad IQ and Ask GPT are then turned off, and your saved reports remain available. On our other apps, you can withdraw your permission by contacting our Grievance Officer. If we add a new AI provider or start sending a new kind of data, we will ask for your permission again in the app.

International transfers

These providers may process data in the United States and other countries outside India. We transfer data only as permitted under the DPDP Act and not to any country restricted by the Government of India.

6. Other Service Providers

• Google Firebase / Google Cloud (infrastructure provider): hosting, authentication, database and file storage
• Apple and Razorpay: payment processing
• Brevo: delivery of service emails (receives your name and email address)
• Regulatory authorities, if legally required

✓ No third-party advertising networks.

7. Storage & Security

• Cloud storage: Google Firebase (India and global regions)
• Encryption: Data encrypted in transit and at rest
• Access control: Restricted access with audit logs maintained

8. Data Retention

• Reports, transcriptions and templates are stored until you delete them or your account
• Voice recordings are used to produce your transcript and are not added to your saved reports
• AI providers keep data only as described in Section 5
• Logs are retained for the minimum periods required by CERT-In
• You may request deletion at any time from settings or support

9. Your Rights Under DPDP 2023

Users have the right to:

• Request access to their data
• Request correction or deletion
• Withdraw consent, including for AI processing (in the iOS app under Settings → AI Data Sharing)
• Raise grievances with our Grievance Officer

10. Grievance Redressal Officer

11. Children's Data

Service is for professional medical use only. Not intended for individuals under 18 years.

12. Changes to Policy

We may update this policy and will notify users of material changes by email or in-app notification. Changes that affect which AI providers receive your data, or what data they receive, take effect in the iOS app only after you allow them.

Contact Information