Privacy Policy

1. Who this applies to

The Services are intended for healthcare practices and their authorized staff (providers and administrators), and for patients using limited self-service flows provided by a practice. The Chrome extension is for signed-in clinic staff only.

2. Information we process

Depending on how you use the Services, we may process:

• Account and authentication data — name, email, organization membership, and session information used to sign you in (via our authentication provider, Clerk).
• Clinic and patient operational data — information your practice already stores or collects in AIDN, such as patient identifiers, contact details, intake responses, messages, and AI-generated intake summaries.
• Health-related information — intake and clinical workflow content that practices choose to process through AIDN (for example chief complaint, medication notes, and related summary fields).
• Technical data — basic logs needed to operate and secure the Services (such as request metadata and error diagnostics).

3. Chrome extension-specific practices

The AIDN Patient Summary Chrome extension has a single purpose: let authorized clinic staff search patients in their active organization and view AI intake summaries from AIDN.

• The extension does not provide a separate password sign-in. It reuses the session from the AIDN dashboard signed in in the same Chrome profile.
• It uses the browser cookies permission only so the Clerk SDK can read the AIDN/Clerk session cookie needed for that sync.
• It uses the browser storage permission only so the Clerk SDK can keep the synced session token in extension storage between popup opens.
• Host access is limited to AIDN (https://beta.askaidn.com) and Clerk (https://clerk.askaidn.com) for API calls and authentication. The extension does not inject scripts into arbitrary websites and does not sell cookie or storage data for advertising.

4. How we use information

We use information to:

• Provide, maintain, and secure the Services
• Authenticate users and enforce organization access controls
• Display patient lists and intake summaries to authorized staff who already have access in AIDN
• Improve reliability, troubleshoot issues, and meet legal obligations

We do not sell personal information, and we do not use personal or sensitive user data from the Services for advertising.

5. Sharing

We share information only as needed to operate the Services, including with:

• Service providers that help us run authentication, hosting, and related infrastructure (for example Clerk for sign-in), under contractual obligations to protect the data
• AI and media processors — when practices use AI features, we send relevant content (such as intake answers, conversation messages, and generated summaries) to model providers including OpenAI to create intake summaries and power clinical workflows. Where audio features are enabled, we may also send audio or text to providers such as OpenAI or ElevenLabs for transcription or text-to-speech. These providers process data to return results to AIDN; we do not sell that content for advertising
• Your organization — practice administrators and authorized staff within the same AIDN organization, according to role-based access
• Authorities when required by law, or to protect the security and integrity of the Services

6. Security

We transmit data over HTTPS and use access controls so that clinic data is available only to authenticated users with the appropriate organization permissions. No method of transmission or storage is perfectly secure; we work to protect information with safeguards appropriate to the sensitivity of healthcare workflows.

7. Retention

We retain information for as long as needed to provide the Services to your organization, comply with legal obligations, resolve disputes, and enforce our agreements. Session data in the Chrome extension can be cleared by signing out of AIDN or removing the extension.

8. Your choices

You may access or update account profile details through AIDN where available, sign out to end an active session, or uninstall the Chrome extension at any time. Practice administrators control which staff members have access to organization data. For patient data requests, contact the practice that collected your information, or reach us using the contact details below if you are a practice administrator.

9. Children

The Services are not directed to children for independent use. Practices may process information about minors only as part of clinical or administrative care workflows they control.

10. Changes

We may update this Privacy Policy from time to time. We will change the "Last updated" date above when we do. Continued use of the Services after an update means you acknowledge the revised policy.

11. Contact

Privacy questions about AIDN or the AIDN Patient Summary Chrome extension:

support@askaidn.com