Privacy Notice
This is a courtesy translation provided for convenience only. The Portuguese (Brazil) version of this Privacy Notice prevails in case of any discrepancy or conflict of interpretation. The data processing described here is governed by the laws of the Federative Republic of Brazil, including the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018).
This Privacy Notice explains how Liora Health processes personal data on the platform, in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018). It complements the Terms of Use.
1. Who processes the data
Liora Health is the controller of the data of the healthcare professionals who sign up on the platform. For the data of patients seen with the support of the platform, the controller is the professional or clinic responsible for the care; Liora Health acts as a processor, handling that data only according to the professional's instructions and to provide the contracted service. Contact: contato@liorahealth.com.br.
2. Data we collect
From the healthcare professional: name, specialty, professional registration number (CRM/CRP), email address, WhatsApp number, city and subscription data. Card details are entered directly with the payment provider and are not stored by Liora Health. From the patient, only when the professional uses the clinical documentation feature: name and phone number registered by the professional, the consultation audio, the transcript, the medical record reviewed by the professional and the record of the consent given in the Free and Informed Consent Form (TCLE). Consultation data is sensitive personal data concerning health.
3. Purposes and legal bases
Professional data: creating and maintaining the account, providing the contracted service, charging the subscription, sending communications about the service and providing support, based on the performance of the contract (Art. 7º, V), compliance with a legal obligation (Art. 7º, II) and, for improving the platform, legitimate interest (Art. 7º, IX). Patient data: recording the consultation, transcribing it and generating a draft medical record that the professional reviews and signs, based on the patient's specific and highlighted consent recorded in the TCLE (Art. 11, I), and keeping the medical record for the period required by professional regulations (Art. 11, II, a). The AI-generated draft is not an automated decision: the professional reviews, corrects and signs the final document.
4. Who we share data with
We use service providers that process data on our behalf, as processors, only for the purposes above: Railway (application servers and database); Vercel (website and web application hosting); Backblaze (encrypted storage of consultation audio); AssemblyAI (AI audio transcription); OpenRouter and the language model providers accessed through it (generating the draft medical record from the transcribed text, after the patient's name, CPF, phone number and email are automatically replaced with placeholders); Resend (email delivery); Stripe and RevenueCat (payments and subscriptions). We may also share data when required by law or by order of a competent authority. We do not sell personal data.
5. International transfer
The providers listed above process data on servers located in the United States, a country without an adequacy decision recognized by the Brazilian National Data Protection Authority (ANPD). This includes patients' health data: the audio, the transcript and the medical record are stored in the United States, and the transcription and AI draft generation also take place there. The transfer is made under Art. 33 of the LGPD: for the patient's health data, based on the specific and highlighted consent given in the TCLE (Art. 33, VIII), which discloses the storage in the United States — sending the audio for transcription and processing by artificial intelligence additionally depend on a separate authorization, without which they do not happen; for the professional's data, because it is necessary to perform the contract (Art. 33, IX). We use providers that offer contractual commitments on data protection and information security.
6. Retention and deletion
Consultation audio is stored encrypted and deleted when the professional approves the medical record, when the patient revokes consent or when a deletion request is made; if none of these happens, it is automatically deleted about 30 days after upload. The medical record, the transcript and the consent record are kept for the retention period required by professional regulations — for physicians, CFM Resolution No. 1,821/2007 (at least 20 years for paper records and permanent retention for electronic records) —, including after a deletion request. The professional's account data is kept while the account is active and, afterwards, for the period needed to comply with legal obligations.
7. Data subject rights
Under Art. 18 of the LGPD, you may request: confirmation that processing exists; access to the data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data or data processed in breach of the law; portability; deletion of data processed based on consent, except where legal retention applies; information about the entities we share data with; information about the possibility of not consenting and its consequences; and revocation of consent. Send your request to contato@liorahealth.com.br; we will respond within the deadlines of Art. 19 of the LGPD. If you are a patient, you may also make the request to the professional or clinic that treated you, which is the controller of that data. You may also file a petition with the ANPD.
8. Data protection officer
The channel for contacting the officer in charge of personal data processing (encarregado, Art. 41 of the LGPD) is the email contato@liorahealth.com.br.
9. Cookies and local storage
We do not use analytics, advertising or tracking cookies. We only use cookies that are strictly necessary for the website to work: liora_auth (keeps the professional's dashboard session, for up to 30 days), liora_admin_auth (admin area session, for 1 day), liora_pending_nonce (links the payment to the sign-up in progress, for 1 hour) and NEXT_LOCALE (remembers the chosen language, for 1 year). The browser also stores the theme preference and the last email used to sign in to the dashboard locally, only to make access easier; this information is not sent to our servers.
10. Changes to this notice
This notice may be updated to reflect changes in the service or in the law. We will communicate relevant changes to the registered email address.
Last updated: September 2026.