Legal

Privacy Policy

Last updated: 21 October 2026

IASORA is a product of AgiliMed ("we", "us"). This policy explains what we collect, how we use it, and the choices you have. It applies to our marketing site, our product and our mobile apps.

Information we collect

  • Account and contact data you provide, such as name, work email, organization, and role.
  • Usage data about how you interact with the site and product, collected to operate and improve the service.
  • Protected health information (PHI) processed on behalf of our healthcare customers, strictly under a Business Associate Agreement and only as instructed by the customer.

How we use information

To provide and secure the service, respond to your requests, and improve our products. We process PHI only as a business associate on behalf of the customer, never for our own purposes.

Legal bases

Where the GDPR applies, we rely on contract, legitimate interests, consent, and legal obligation as appropriate.

Sharing

We share data with vetted subprocessors that help us run the service, under written data-protection terms. We do not sell personal data.

Cookies and live chat

We use cookies and similar technologies to operate the site and, subject to your preferences, for analytics (Google Analytics) and marketing (Meta Pixel). In the EEA, the UK and Switzerland, non-essential cookies are used only with your consent. You can manage your preferences at any time via Cookie preferences in the site footer. Our "Chat to sales" widget is provided by tawk.to and loads only when you choose to start a chat. It is intended for sales and product questions, so please do not share patient or health information through it.

Mobile apps

This section covers our two mobile apps: IASORA for Providers (shown as "IASORA Pro" under the icon), for people who work at a healthcare provider, and IASORA Health, for anyone who wants to keep their own health information. It adds to the rest of this policy. If the two differ, this section applies to the apps.

How the two apps handle your data

  • IASORA Health works on your phone with no account. Your Health Vault stays on your phone. Nothing leaves it until you connect a healthcare provider. Once you do, your data goes only to that provider's IASORA region, and no one else.
  • IASORA for Providers needs an IASORA account. You can create one free in the app, or sign in with the account your organisation gives you. It reads and writes the patient records you are allowed to see, as set by your organisation.

What the apps collect, and why

We collect this only to make the apps work (app functionality and account management). We do not use it for advertising.

  • Name and email address, to sign you in and identify your account. IASORA Health also asks for an optional phone number, date of birth and sex when you connect a provider.
  • Health information. In IASORA for Providers, this is the patient records clinicians read and write. In IASORA Health, this is the vitals, medicines, conditions, allergies and immunizations you enter or sync, shared with your provider only after you connect.
  • Messages, notes and files: messages with your care team, visit notes and tasks, and documents you upload.
  • Microphone audio, for AI Scribe (Providers) and the Sora assistant (both apps), and for video visits. Live voice is processed as you speak.
  • Camera and photos, for video visits, profile photos and uploads you choose.
  • User ID and push notification token, so we can send you notifications. IASORA Health does this only once you are connected to a provider.
  • Crash reports from Firebase Crashlytics, to find and fix bugs. In IASORA Health these are on Android only and carry no patient ID. In IASORA for Providers on Android they can include your staff user ID and workspace.

We do not collect your location or your contacts.

AI features

Both apps include Sora, IASORA's AI assistant. IASORA for Providers also includes AI Scribe. Before you use an AI feature for the first time, the app explains what will be sent and asks for your permission. Nothing is sent until you agree.

  • Data sent: the text you enter or the speech you record for the feature, and the health information needed to complete your request.
  • Recipient: IASORA's AI service, operated by AgiliMed. The data is used only to produce the response, summary or note you requested, and is not shared with any other AI company.
  • IASORA Health: AI features are available only after you connect a healthcare provider.
  • Withdrawing permission: in IASORA for Providers, go to Settings > AI features. In IASORA Health, go to Profile > Sora AI assistant.

Signing in

You can sign in with an email code, Apple or Google. IASORA for Providers also supports Microsoft.

Apple Health and Google Health Connect

IASORA Health can read data from Apple Health (HealthKit) on iPhone and Google Health Connect on Android, if you allow it. You choose which kinds of data to allow, and you can change this at any time in your phone's settings.

  • Read only. The app never writes to Apple Health or Health Connect.
  • What we read: heart rate, resting heart rate (Health Connect only), blood pressure, oxygen saturation, weight, blood glucose and body temperature.
  • What happens to it: it is shown to you in your Health Vault. It is sent to your healthcare provider only after you connect one.
  • We never use this data for advertising or marketing. We never sell it. We never share it with third parties for any other purpose. We do not use it to train AI models.

The use and transfer to any other app of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.

No ads, no tracking, no sale

Neither app shows ads. Neither app tracks you across other companies' apps or websites, and neither uses an advertising ID. We do not sell your data.

Deleting your account

  • IASORA for Providers: Settings > Account > Delete account.
  • IASORA Health: Profile > Delete my account. If you have not connected a provider, use Reset Health Vault.
  • On the web: app.us.iasora.ai/delete-account.

Some records held by your healthcare provider may need to be kept under the law that applies to them.

Questions about the apps

Email support@agilimed.com.

Retention and security

We keep data only as long as needed for the purposes described or as required by law, and protect it with encryption in transit and at rest, access controls, and audit logging.

Your rights

Subject to applicable law, you may request access, correction, deletion, or portability of your personal data, and object to certain processing. Contact us to exercise these rights.

Contact

Questions about this policy? Email hello@agilimed.com.