MedRadX Privacy Notice

Revision 2026-11-08

MedRadX Dictation (com.medradx.dictation) is the Android companion to MedRadX Workstation and the MedRadX webapp. MedRadX is developed under the Axentra Technologies brand; the Google Play developer display name is Axentra Technologies Development. This notice describes the companion and the related account and receiving-workspace services. Contact: medradx@axentra-technologies.net.

Information processed and why

• Account and access: email address, identity-provider identifier, sign-in proof, account approval and access status. Optional profile information can include your name, institution, professional title, signature, settings and templates. These support authentication, administrator approval, account management and synchronization.
• Microphone audio: when you explicitly start dictation, audio is streamed over encrypted connections to MedRadX cloud services and Google Cloud speech recognition. It is processed to produce transcription, not saved by the companion for later audio upload. Streaming audio is still data processing even when it is not written to an audio file.
• Dictation and reports: interim and finalized words, measurements and other information you dictate are processed and sent to the receiving workspace you select and confirm. They may contain patient or other health information. The receiving MedRadX workspace can save drafts, report history, comparison text, templates and exports. If you generate a report there, its selected content is processed by the configured reporting services, including Google Cloud/Vertex AI where enabled. The phone does not generate reports.
• Connection and operation: random session/device-workspace identifiers, sequence numbers, delivery acknowledgements, recording status and technical service metadata support delivery, security and troubleshooting. Cloud infrastructure may process network metadata such as IP addresses. Administrator signup alerts contain limited applicant identity/access-request details, not dictated reports.
• Local preferences: appearance and connection preferences are stored on your device. Authentication is managed through Firebase Authentication and the selected Google or Microsoft provider.

Your controls and permissions

Microphone permission is used for a recording you start. Android recording notifications provide a stop control; the microphone foreground service allows that recording to continue while the screen is locked or another app is open. Calls, loss of microphone access or connectivity can interrupt it. Pause or stop recording, end the phone session or sign out to control further capture and delivery. Denying microphone permission prevents dictation. No contacts, precise-location, camera or advertising-ID access is requested by this companion.

Only an approved account and a confirmed receiver on that account can use the dictation connection. Clinical use requires your organization's authorization and appropriate arrangements for patient data. Review transcription and all generated clinical content before use; neither speech recognition nor an AI draft is a diagnosis or a substitute for professional judgment.

Providers, recipients and security

Google/Firebase and Google Cloud provide authentication, hosting, storage and speech/report processing for the configured service. Microsoft processes Microsoft sign-in when selected. The confirmed MedRadX receiving workspace receives your text. Support administrators access the information necessary for access requests, support and verified deletion. These services may process data outside your country under their applicable arrangements; this notice makes no promise of country-specific residency or regulatory certification.

MedRadX uses HTTPS/WSS for service transport. The current cloud workspace and temporary companion store encrypt their stored payloads. This is not a claim of end-to-end encryption: authorized services must process audio and text. The companion contains no advertising or advertising-ID integration. Data is not offered for sale by this application. Do not send clinical information, passwords or verification codes to the support mailbox.

Retention and deletion

Account profiles and saved cloud workspaces remain while needed for your active account until removed or covered by a verified deletion request. Ending a phone session clears its phone transcript and connection; text already delivered to a workstation is separate and is not erased by that action. Interim and undelivered delivery buffers use short-lived sessions; the encrypted companion record has a two-minute logical expiry renewed by activity and an active cloud TTL policy. TTL cleanup is asynchronous, not a guaranteed physical deletion exactly two minutes later.

Current routine cloud-log retention is 30 days; required infrastructure audit-log retention is 400 days. These records can include access/request metadata and limited signup identity details; they are not intended as clinical-content storage. Deleted cloud workspace objects can remain recoverable under the current seven-day storage soft-delete policy before permanent removal. These infrastructure periods are not promises that all data exists in those logs or that all copies share the same lifecycle.

For a verified account-deletion request, the service procedure is to remove active account access, profile/signature/settings, associated hosted workspace data and companion connections within 30 days, and confirm completion or explain any delay. A specific record may be retained only where required for legitimate legal, security or fraud-prevention obligations; the requester will be told the applicable category, reason and retention period rather than receiving a blanket indefinite-retention exception. Exports and copies held on your own devices or by your organization are outside automatic cloud deletion and must be handled separately by their controller. Request account and associated data deletion.

Audience and changes

MedRadX Dictation is intended for adult professional users, not directed to children. For privacy questions, access or correction requests, contact medradx@axentra-technologies.net. Material changes to these practices require an updated notice. Policy revision: 2026-11-08.