Privacy Policy

Last updated: October 2026

This policy covers the Aural Iris apps for Android phones and Wear OS watches and the Iris service at apps.auraliris.com (together, “Iris”). Iris is provided by Aural Iris LLC, a Virginia limited liability company (“Aural Iris”, “we”).

1. Who this applies to

Iris is offered to clinicians and the organizations they work for. When a clinician uses Iris with patient information, the clinician or organization decides what to submit, and we handle that information on their behalf. Where HIPAA requires it, we handle protected health information as the service provider of the clinician or organization that uses Iris, under a business associate agreement.

If you are a patient, we do not have a relationship with you and you cannot sign in to Iris. Your clinician or their organization is the one to ask about your information; we process it only for them.

2. What Iris handles

• Account information. Your name, your email address or user name, your role, a one-way hash of your password (never the password itself), and the sign-in sessions and device tokens that keep you signed in. If you turn on fingerprint or passkey sign-in, we keep the public part of your passkey and the phone keeps a sign-in token that only your fingerprint can unlock. Your fingerprint stays on your device. We never receive it. If you choose to save a phone number or a second email address for sending yourself notes, we keep it; Iris uses it only to build message and email links on your own device and never sends messages itself.
• Team information. If you join a team in Iris: the team and its members (display names and roles), your own list of teammates, who supervises or takes over a chart, and the requests, hand-offs and notes you send to teammates. Teammates in the same team can see the names and roles of the other members.
• Clinical content you provide. Audio of encounters that you choose to record, text you type or dictate, voice commands, photos, video, screenshots, scanned documents and pasted chart text, including the patient information in them.
• What Iris prepares for you. Transcripts, draft notes, prompts about missing details or patient safety, room-board entries, your edits, and the note you copy into your chart.
• Device and activity information. App version, device type, notification and device tokens, microphone and battery status reports, your app settings and preferences (for example alert and Discreet choices), a log of what was done and when (types and identifiers, not clinical text), your IP address, technical logs and error reports.
• Messages to us. What you write to us through Iris Help or Support.
• Watch. On a Wear OS watch, the words you speak to Iris are turned into text by the speech recognition service that is set up on your watch (for example Google or Samsung). That service may send the audio to its own provider for transcription, under that provider's terms; Iris receives only the recognized text. The watch app itself does not save or upload audio.

Iris does not read your phone's address book, your location, text messages, call history, advertising ID or health-sensor readings from your phone or watch.

3. How we use it

• To provide Iris to you: turn your recordings into text, draft notes for your review, show them to you, send you the alerts you asked for, pass requests, hand-offs and notes to the teammates you choose, and keep your account working.
• To keep Iris secure, prevent misuse, fix problems and answer your questions.
• To meet legal obligations.

We do not sell your information, we do not use it for advertising, and we do not use it to train AI models.

4. Who handles it for us

We use service providers, under written agreements, and we send them information only to provide Iris to you:

• Server hosting: Iris runs on a dedicated server in the United States that a hosting company operates for us under a business associate agreement. Recordings you make in Iris are turned into text by speech-recognition software running on that server and are not sent to any outside speech-to-text service. (Voice input on a watch works as described in section 2.)
• Backup storage and standby hosting: Amazon Web Services, in the United States, stores encrypted copies of our backups and can run Iris for a time if our main server fails.
• AI model provider: Anthropic, under a business associate agreement, drafts notes from text and reads photos and still frames taken from video. Audio and video clips are not sent to Anthropic.

We do not otherwise share your information with anyone, except when you send a note somewhere yourself (for example, when you copy it into your chart), or when the law requires it.

5. Security

Information travels between your device and Iris over encrypted connections (HTTPS). It is stored on encrypted storage on those servers. Access is limited to people and systems that need it, and Iris keeps a log of who did what. No system is perfectly secure, and we cannot promise absolute security.

6. How long we keep it, and deleting it

• Raw audio: deleted automatically as soon as it has been turned into text and the note work for that chart is done. Temporary encrypted copies made on our server for transcription are removed automatically, normally within about two days.
• Charts: a chart you mark done is removed automatically after 24 hours. Items that were never put into a chart are removed after 24 hours. You can also discard a chart yourself at any time.
• Photos and video: the original video clip is deleted together with the raw audio. Photos and the still frames taken from a video are kept with their chart and removed when the chart is removed.
• Backups and standby copies: encrypted backups are kept so that Iris can recover from a failure, and are deleted by fixed rules (our off-site backup copies after about five weeks). Our hosting company may also keep copies of these encrypted backup files under its own backup schedule. The encrypted disk of a stopped standby server can still hold content from the time it last ran until that content is deleted there. Content you deleted can remain in these copies until they are deleted.
• Account information and activity logs: kept while your account is active, and afterwards as long as needed for security and legal records.

To have your data deleted, write to accounts@auraliris.com, preferably from the email address on your account, and tell us your user name. If your account has no email address, give your user name and we will check your identity another way before we act. Say whether you want your account, your charts, or both deleted. Do not include patient information. We will confirm the request and tell you when it is done. Deleting your account also deletes the charts and other content in it, and signs you out of every device, except records we must keep for security or by law. Content in a backup or standby copy is removed when that copy is deleted (see above).

7. Your choices

• Recording starts only when you start it. While you record, Iris runs a microphone service whose notification appears when notifications are allowed for Iris, and Android also shows its own microphone-use indicator.
• You can turn off the microphone, camera and notification permissions for Iris in Android Settings at any time. Features that need them will stop working.
• You can ask us for a copy of your account information, to correct it, or to delete it, using the email address above.

8. Children

Iris is for clinicians and is not directed to anyone under 18. We do not knowingly create accounts for children.

9. Where information is handled

Iris runs on servers in the United States, and our backups are stored in the United States. Our AI provider performs model inference on the text and images Iris sends it in the United States.

10. Changes

If we change this policy in a way that matters, we will change the date above and tell signed-in users in Iris.

11. Contact

Aural Iris LLC, a Virginia limited liability company.
Email: accounts@auraliris.com
Please do not include patient information in your email.