Privacy, audio and deletion

Free deletes audio when the first draft arrives. Paid retains it for review, then deletes it on confirmation by default, within a hard seven-day ceiling.

The QR receipt a patient can keep: login-free, no patient details, and it flips to Verified when the copy of the audio Small Mercy holds is actually gone.

Paid listen-back is available to the clinician while audio is retained for review. Free has no playback after its draft arrives.

No. Not audio, not transcripts, not notes — clinical data is never used to train models, by Small Mercy or by its providers.

Every access to a clinical record is written to an append-only log. Retention and lawful purge are controlled separately.

Your practice is the controller of clinical data and Small Mercy is its processor. Your rights, the Article 27 representatives, the request portal and the ICO route.

Audio goes by default. On termination, clinical data is deleted within 14 days; encrypted backups expire on a 35-day cycle in the UK region; the evidence trail is retained.

For UK organisations, breach notification is a contractual term — without undue delay and within 72 hours of becoming aware, to the practice-owner email and by in-product notice.