Privacy comes
with the diary.

PCI Diary is developed by Dr. Kunal Ajay Patankar. This policy covers the PCI Diary app and this website, pcidiary.in. For privacy questions, contact connect@pcidiary.in. The app is coming soon to the App Store and Google Play; platform availability and supported features will be stated in the relevant store listing.

1. What stays on your phone

Your case notes, photos, clips, captions, teaching pins and spoken debriefs are kept in the app’s storage on your device. Patient names and other screen text are blacked out on the phone before a photo or clip is saved. The camera’s unmasked file is deleted whether you save the shot or retake it.

Speech recognition takes place on the device when a supported on-device speech model is available. If it is unavailable, you can type your notes. PCI Diary does not send speech to a cloud transcription service as a fallback.

There is no PCI Diary account, advertising, behavioural analytics or tracking. We do not sell your information.

2. When information leaves your phone

Tidy with AI — only after you allow it

If you allow Tidy with AI, the debrief’s recording and text are sent to Google’s Gemini through Firebase AI Logic to produce a suggested write-up. Photos and clips are not sent to the AI. You can decline and continue using the rest of the app.

Once allowed, tidying may start when you stop recording while online, or when you tap Tidy with AI. It is not queued for background sending. The suggestion changes nothing until you tap Use this, and your original words are kept. Permission can be turned off in the app.

The service uses Google’s paid Gemini API terms, under which submitted content is not used to improve Google’s products. Google processes the request under its own service terms and privacy rules, including applicable operational and abuse-prevention processing. See Google’s Gemini API terms and Google’s privacy policy.

Google Drive backup — your own account

If you connect Google Drive, the app copies your case list and saved media to a visible PCI Diary Backup folder in your own Google account. It requests the drive.file permission, which limits access to files created by or explicitly opened with the app. It does not request access to your entire Drive. Debrief recordings are not included in backups or exports.

Google’s sign-in software manages the account connection. The app does not maintain its own database of Google accounts or persist access tokens in its case files. Access tokens are used in memory to communicate with Google. Disconnecting Google Drive stops future app backups; it does not erase existing copies in Drive.

Exports and referral cards — where you send them

When you export your collection or share a referral card, the file goes to the destination you select in your phone’s share sheet. The app does not send it to us. The recipient or service you choose will handle that copy under its own terms.

3. Device permissions

The app asks for camera access to capture images and clips, microphone access to record a debrief, speech-recognition permission where required for on-device transcription, and device-authentication access if you choose to lock the app. Google sign-in is needed only if you choose Google Drive backup.

You can change permissions in your device’s settings. Restricting a permission may make the corresponding feature unavailable.

4. Storage, retention and deletion

Your cases stay in the app until you delete them. A debrief recording is kept locally with its case until you use the tidy version or delete the case. Removing the app removes its local data, subject to your device’s own backup and restore behaviour. Keep a verified backup or export before changing phones or removing the app.

Removing a case from your phone does not immediately remove every historical backup. Older backups and Drive’s bin may retain copies. To remove your backup collection, delete the PCI Diary Backup folder and, where appropriate, empty the relevant files from Google Drive’s bin. Device backups, exports and copies already shared must be managed separately in the services or locations that hold them.

You can revoke Google Drive access through your Google account settings as well as disconnecting in the app.

5. Your responsibilities and security

Masking screen text reduces exposure of identifiers; it does not guarantee that every image or note is anonymous. Check every saved image, caption, debrief and referral card for identifying information, including anything you dictate. Use the app only with the permissions and safeguards required by your hospital and applicable rules.

Protect your phone with its passcode and available app lock, and secure your Google account. No device or online service can guarantee absolute security.

6. This website and support email

This website has no advertising trackers, analytics scripts, account registration or patient-upload forms. Fonts, scripts and images are served with the site; the site does not set application cookies or use browser storage.

The hosting provider may process technical request information, such as your IP address, browser and time of access, to deliver and secure the website. For the hosting provider’s information-handling practices, see Hostinger’s privacy policy.

If you email us, we receive your email address, your message and any attachments you choose to send. We use that information to answer and manage your request, and retain it only as needed for support and any applicable obligations. Please do not send patient names, clinical images, recordings or other identifiable clinical information. Ask for help using a description without patient details.

7. Children

PCI Diary is intended for medical professionals and is not directed at children.

8. Changes to this policy

We will publish changes here with an updated date. If an app change requires a new permission or new consent, it will ask in the app before that processing begins.

9. Privacy enquiries

To ask about this policy or information you have sent to us, email connect@pcidiary.in. Case data stored on your device or in your own Google Drive must be managed there; we cannot retrieve it from a PCI Diary server.

Developed by Dr. Kunal Ajay Patankar