Privacy Policy
Your privacy and the security of your health information is our top priority. Here's how we protect and handle your data.
Last updated: April 2026
Data Minimization
We only collect and process the minimum amount of information necessary to provide our translation services. We don't store unnecessary personal data. Anonymized aggregate data about report categories may be retained for product improvement.
User Control
You have complete control over your data. You can request access, corrections, or deletion of your information at any time.
Transparency
We clearly explain what data we collect, how we use it, and who has access to it. No hidden practices or unclear terms.
Automatic Deletion
Your medical documents and personal information are automatically deleted from our servers weekly.
Information We Collect
Medical Documents
We process the medical reports you upload to provide translation services. This may include lab results, imaging reports, clinical notes, and other healthcare documents.
Contact Information
We collect your email address to send you translated reports and service updates.
Technical Information
We collect basic technical information like IP address, browser type, and usage patterns to improve our service and ensure security.
How We Protect Your Data
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your information is protected with bank-level security standards.
Access Controls
Access to your data is restricted to authorized personnel only and logged for auditing. We use multi-factor authentication and principle of least privilege access.
Infrastructure Security
Our systems are hosted on HIPAA-compliant cloud infrastructure with regular security audits, penetration testing, and compliance monitoring.
Data Retention and Deletion
Automatic Deletion
Your uploaded medical documents are automatically deleted from our servers weekly. Translated reports are retained only as long as necessary to deliver them to you.
Contact Information
Your email address is retained only for service delivery and support purposes. You can request deletion of your contact information at any time.
Analytics Data
We collect anonymized, aggregated data about report types and general medical topic areas to improve our service and understand usage patterns. This data cannot identify you personally, is never tied to your individual report or email address, and is not currently sold to third parties. It is used solely for internal product improvement purposes.
Your Rights
Access
You have the right to know what personal information we have about you and how it's being used.
Correction
You can request corrections to any inaccurate personal information we may have.
Deletion
You can request deletion of your personal information at any time, subject to legal requirements.
Portability
You can request a copy of your personal information in a machine-readable format.
Data Sharing and Third Parties
We do not sell, rent, or share your personal health information with third parties for marketing purposes.
Service Providers
We may share data with trusted service providers (hosting, email delivery, analytics) who help us operate our service.
Legal Requirements
We may disclose information if required by law, court order, or to protect the rights, property, or safety of PlainSpeak Health, our users, or others.
Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of PlainSpeak Health's assets, user data may be transferred to the acquiring entity. Users will be notified via email and/or a prominent notice on our website prior to any such transfer.
Aggregate Data Use
PlainSpeak may collect and analyze anonymized, aggregated information about the types of medical reports submitted — such as report category and general medical topic area — to improve our service and understand usage trends. This information is never tied to your identity, your email address, or your specific report. It is not currently sold, and it is not intended to be sold, to third parties. In the event of a company acquisition or merger, anonymized aggregate data may also be transferred to the acquiring entity.
Contact Us About Privacy
If you have questions about this privacy policy or how we handle your data, please contact us:
Email: john@plainspeak.co
We will respond to privacy inquiries within 30 days.
Important Medical Disclaimer
PlainSpeak Health is not a medical provider. Our translations are for informational purposes only and should not replace professional medical advice. Always consult with qualified healthcare professionals for medical guidance and treatment decisions.
Understand your medical records in plain English. Professional healthcare document translation made simple.
Trust & Security
Copyright © 2026 PlainSpeak Health, LLC. All rights reserved.