Privacy Policy

Last updated: May 2025

1. Introduction

SonoPilot ("we," "us," or "our") operates the SonoPilot application and website at sonopilot.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using SonoPilot, you agree to the terms of this policy.

2. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password managed by our authentication provider (Supabase).

Ultrasound images: Images you upload for analysis are transmitted securely to our AI processing service. We do not permanently store your uploaded images; they are processed in real time and discarded after the analysis is returned to you.

Usage data: We collect anonymized information about how you interact with the app (pages visited, features used, scan counts) to improve our service.

Payment information: Billing and payment data are handled entirely by Stripe. We never store your credit card number or full payment details on our servers.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the SonoPilot service
  • Process AI-powered ultrasound analysis requests
  • Manage your account and subscription
  • Send transactional emails (account creation, password reset, billing receipts)
  • Monitor usage to enforce plan limits and prevent abuse
  • Improve and develop new features based on aggregated usage patterns

4. Medical Disclaimer

SonoPilot is an educational study tool only. It is not a substitute for professional medical care and does not provide medical advice, diagnosis, or treatment. Always seek the advice of a licensed physician or other qualified healthcare provider with any questions regarding a medical condition. Do not use SonoPilot as the basis for any medical decision.

5. Data Sharing and Third Parties

We do not sell your personal information. We share data only with:

Anthropic: Ultrasound images and related prompts are sent to Anthropic's API for AI processing. Anthropic's data practices are governed by their own privacy policy.

Supabase: Manages user authentication and profile storage. Data is encrypted at rest and in transit.

Stripe: Handles all payment processing. Subject to Stripe's privacy policy.

Vercel: Hosts the application. Processes request logs as part of hosting infrastructure.

6. Data Retention

Account data is retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law (e.g., financial records). Uploaded images are not retained after analysis is complete.

7. Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage, and access controls. However, no method of transmission or storage is 100% secure. We encourage you not to upload images containing patient-identifying information.

8. HIPAA Notice

SonoPilot is not a HIPAA-covered entity. Do not upload protected health information (PHI) as defined under HIPAA. If your use case requires HIPAA compliance, please contact us at support@sonopilot.app before proceeding.

9. Children's Privacy

SonoPilot is intended for use by healthcare professionals and is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, please contact us at support@sonopilot.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the app. Continued use of SonoPilot after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

Questions about this Privacy Policy? Contact us at:
support@sonopilot.app