Privacy, Ethics & Clinical Governance Policy
Plain-language disclosure of how patient voice data, document OCR, and AI agent outputs are governed.
Industra Medicose is demonstrated using 100% synthetic, anonymized clinical data created for Problem T01 “The Two-Minute Doctor”. No real patient Protected Health Information (PHI) is processed or retained without explicit consent.
We collect audio microphone input during patient intake (transcribed via browser speech API), user-entered symptoms, and uploaded medical documents (prescriptions, lab tests). Speech audio is processed in memory and never permanently stored as raw audio files.
Strict Clinical Posture: The AI agent system NEVER makes an unverified clinical diagnosis, never prescribes pharmaceuticals directly to patients, and never lowers emergency triage urgency. Every summary must be reviewed and digitally signed by a licensed physician before release.
Data is retained strictly for the duration of the clinical consultation lifecycle (30-day demo cycle). Documents uploaded to Supabase Storage are protected by private bucket Row Level Security (RLS) policies requiring authenticated token verification.
In accordance with Section 6 of the Digital Personal Data Protection Act (DPDP 2023), patients retain unconditional rights to withdraw consent at any time and demand instantaneous data erasure without consequence.
Delete all synthetic consultation records, anonymize clinical intake transcripts, and purge document storage buckets associated with your current session.