Privacy policy
Last updated October 12, 2026.
Only you and the family you invite can read your visits. Not even Nota.
What stays on your iPhone
- Visit recordings. Audio is recorded, transcribed and summarized on the patient's iPhone. It is never uploaded. Recordings delete themselves after 30 days unless you choose to keep one.
- Medication searches. The drug list is stored in the app, so what you search for never leaves your phone.
What we store, and what we can read
To share visits with your family, Nota keeps encrypted copies of transcripts, summaries, your medication list and your questions on our servers. They are encrypted on your phone before they are sent, with keys only your family's devices hold. We can't read them.
To run the service we do see a few things that aren't health information: your name and email address, which devices you use, who is in your family group, when records change, and whether you subscribe.
What we never do
- We don't sell your data or share it with advertisers. Nota has no advertising code in it.
- We don't use your health information for research, marketing or training AI.
- Notifications never include health details. You'll see "New visit summary for Mom," not what the doctor said.
Your family group
The patient decides who can see their visits and how much: everything, summaries only, or only the visits they choose to share. A family member can see nothing until the patient agrees on their own phone. When someone is removed, the family's keys change so they can't read anything new.
Recording the doctor
Nota asks the doctor for permission at the start of every visit and keeps their answer at the start of the recording. If the doctor says no, use note mode to speak a recap after the visit instead.
Your choices
- Export: Settings, then Export everything, gives you a copy of all your visits and your medication list.
- Delete: Settings, then Delete account, removes your account from our servers and from your devices. If you are the patient, your family's shared records are deleted too.
- Washington, Nevada, Connecticut and other states: you can ask us what we hold, ask us to delete it, and withdraw consent at any time by writing to [email protected].
If something goes wrong
If our servers were ever breached, the visit content there is encrypted and unreadable without your family's keys. We would still tell you and the Federal Trade Commission, as the FTC Health Breach Notification Rule requires.
Nota is not a medical device
Nota writes down what the doctor said. It doesn't diagnose, interpret results or recommend treatment. Summaries can contain mistakes; your doctor's instructions always come first.