Privacy and security
Your visits are private. Here is how we protect them.
A recorded doctor visit is deeply personal. This page explains in everyday language how Lenaya Health protects it.
How we protect it
The protections around your visits, explained clearly.
For the technical standard we use and the safeguard behind each protection, read the security details.
You control your Care Circle
Family, friends and caregivers can see your visits only after you invite them to your Care Circle. For each person, you choose whether they can just view visits or also record and add documents for you. You can change their access or remove them at any time.
No password to steal
You sign in with your Google or Apple account, so we never create or store a password for you. On iPhone, your sign-in is kept in the phone’s secure Keychain, locked to that one phone. On Android, it is encrypted with a key kept in the phone’s Android Keystore and left out of backups, so it stays on that one phone. In a web browser, it is cleared when you close the tab.
Encrypted on the way and where we keep it
Everything travels between your device and our servers over encrypted connections. Once uploaded, your recordings, transcripts, summaries and documents are encrypted where we store them, too.
Kept off the open internet
Your records are kept in a database and file storage that are closed to general access from the open internet. The Lenaya app connects to them over a private network.
A security log
We record sign-ins, failed sign-in attempts and other important account events, and we keep that log for six years.
Visit notifications leave out the details
A visit-ready notification says only that. The details stay inside the app, behind your sign-in.
Not for sale
Your information is never the product.
- We never sell your information. That includes advertisers and data brokers.
- We never use your recordings, documents or health information to train AI models. The services that run Lenaya for us are not allowed to train their own models on it either.
- No ads, and no code that tracks you across other websites or apps.
Your records, your call
Take it with you, or take it away.
- Download your records. From the web app, you can download a copy of your transcripts, summaries and documents.
- Delete a visit, or your whole account. Most of it is removed right away. Some derived data, and our routine encrypted backups, clear within about three weeks. The Privacy Policy explains what is kept and why.
The people you record
Their privacy matters too.
A visit includes your clinician, and sometimes a family member. Recording laws vary by state, and some require everyone in the room to agree. Ask everyone before you record — it’s part of our Terms.
Questions about your privacy?
Read the full policy, or write to us.