Privacy notice

Narrativ Heal is a patient-controlled tool. You record your own visits, on your own device, under your own account. We are not your doctor, your hospital, or your insurer, and we do not operate on their behalf.

Because of that, Narrativ Heal is generally not a HIPAA covered entity or business associate. That does not mean the information is unprotected — it means a different set of rules applies, including the FTC Act, the FTC Health Breach Notification Rule, and state consumer health privacy laws. We hold ourselves to the protections described on this page regardless.

Narrativ Heal does not provide medical advice, diagnosis, or treatment, and it is not a substitute for your medical record or your care team's judgment.

• Account information. Your name, email address, and plan.
• Audio you choose to record. Audio is processed into text. We keep the resulting transcript, not a permanent audio library.
• Visit content. Transcripts, summaries, key points, action items, and the suggested questions generated for each visit.
• Clinical events we extract. Medication changes, imaging studies, and procedures mentioned during a visit, so your timeline stays accurate.
• Anything you type. Manual notes, visit reasons, provider names, and record sources you add yourself.
• Consent and access records. Timestamps for recording permission and research acknowledgement, plus a log of access to your own record.

• Producing your per-visit summary, key points, and action items.
• Suggesting questions to ask your provider during the visit.
• Building your longitudinal health narrative across every visit.
• Generating the patient narrative and clinician brief you can share.
• Contributing a de-identified copy to the Narrativ Heal research dataset.
• Keeping the service secure, investigating abuse, and meeting legal obligations.

We do not use your identified health information for advertising, and we do not sell your identified health information.

Contributing a de-identified copy of each visit is a condition of using Narrativ Heal. This is how the patient app stays free. When you create an account, we ask you to acknowledge this explicitly rather than bury it here.

Only de-identified copies leave your account. Direct identifiers — names, contact details, dates of birth, record numbers, precise locations — are removed, identifying free-text detail is generalised, and every copy is risk-scored before it is stored. Your identified record stays in your account and is never shared without you.

The full detail, including what a de-identified record looks like, is on the research contribution page.

• Cloud infrastructure and database hosting providers, who store the data on our behalf under contract.
• AI processing providers, used to transcribe audio and generate summaries, questions, and briefs.
• Research licensees, who receive de-identified records only, under contracts that forbid re-identification.
• Anyone you personally choose to share a summary or brief with — including your providers.

We do not otherwise disclose your information except where the law requires it, or to protect someone from serious harm.

• Encrypted in transit and at rest.
• Row-level access control, so your record is only reachable by your own authenticated account.
• Researcher access to the de-identified dataset gated behind an explicit assigned role.
• Access to your record logged, and the log visible to you in your export.
• Recording blocked until you confirm everyone in the room agreed.

No system is perfect. If your information is ever involved in a breach, we will notify you, and the FTC where required, without unreasonable delay.

Your identified record is kept for as long as your account is open, because the whole point is a record that accumulates over time. When you delete your account, your identified record — visits, transcripts, summaries, questions, sources — is permanently deleted.

De-identified research copies already contributed cannot be traced back to you and are not deleted, because by design there is no longer any link between them and your identity.

• Export everything we hold about you as a single file, at any time, from Settings.
• Permanently delete your account and your identified record from Settings.
• See the access log for your own record inside your export.
• Ask us a question or make a request by email if you cannot sign in.

Details and step-by-step instructions are on the your data page.

Narrativ Heal is intended for adults. We do not knowingly create accounts for anyone under 18. If you believe a minor has an account, email admin@narrativheal.com and we will remove it.

If we change how we handle your information in a material way, we will update this page and tell you in the app before the change takes effect.