Privacy Policy

Account information. Your email address, and if you sign in with Google or Apple, the basic profile information those providers share with us (name, email, account identifier).

Content you provide. The clinical notes, documents, and PDFs you upload or paste, the translations and vocabulary terms you save, the practice quizzes generated from your notes, and how you organize everything into folders.

Payment information. If you subscribe to Bisturí Pro, our payment processor (Stripe) handles your card details directly: we never see or store your card number. We keep a record of your subscription status and billing period so we know your account is active.

Usage data. How many translations and practice quizzes you’ve used (to apply plan limits), your study streak (days of consecutive activity), and standard technical data such as IP address and browser type collected automatically by our hosting infrastructure.

To operate the service: running translations, storing and syncing your notes, and keeping your account secure. To process payments and manage your subscription. To send account-related emails, such as sign-up confirmation. We do not sell your personal data, and we do not use your content to train AI models.

We use a small set of service providers to run Bisturí, each only for the specific job below:

• Supabase: database, authentication, and file storage.
• Anthropic: the text you select for translation, and the note content used to generate a practice quiz, are sent to Anthropic’s Claude API to produce the result.
• Stripe: payment processing for subscriptions.
• Resend: delivering account emails.
• Google / Apple: only if you choose to sign in with one of these providers.

We don’t share your data with anyone else, and we don’t sell it.

We keep your data for as long as your account is active. You can request deletion of your account and all associated data (notes, vocabulary, folders, subscription records) at any time by contacting us. This is permanent and cannot be undone.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data (for example, under GDPR if you’re in the EU/UK). Contact us to exercise any of these rights.

We use encrypted connections and database-level access controls (row-level security scoped to your account) to protect your data. No system is perfectly secure, and we can’t guarantee absolute security.

Bisturí isn’t directed at children under 16, and we don’t knowingly collect data from them.

We may update this policy from time to time. Material changes will be reflected with a new “last updated” date above.

Questions about this policy? Reach us at support@bisturí.com.