Your data
The safest place for a session recording is nowhere.
Every scribe tells you your data is secure. That usually means it’s stored somewhere, encrypted, behind someone else’s login. ScribeUp is built the other way around: session audio, transcripts and generated notes are never retained at all, so there is no archive to secure, breach, subpoena or sell.
Last reviewed 12 August 2026
One session, start to finish
- 01
Record
On-device, live
- 02
Transcribe
Zero-retention
- 03
Draft
Discipline template
- 04
Discard
Audio + transcript gone
- 01
Before you record
The app shows a consent screen. You confirm your client has agreed to be recorded for this session. There is no way to start a recording without passing through it.
- 02
While you record
Your session is captured and held securely on your own device the whole time you're recording — never sent anywhere until you stop. A dropped connection or a closed laptop doesn't cost you the session.
- 03
When the session ends
What you recorded is sent off for transcription, then the transcript — plus whatever context you entered for that person, care goals, history, whatever your discipline needs — goes to the language model with your discipline's document template. The draft comes back and appears on your screen.
- 04
The moment the note appears
The audio, the transcript and the server-side copy of the note are discarded. What remains is the draft on your screen and a counter that ticks from 41 notes to 42.
- 05
After you paste it
Your browser's local copy is cleared. Your EHR now holds the only record of that session, which is where it belonged all along.
What we store
All of it lives in a Supabase project hosted in Australia. None of it is session content.
| What | Detail | Kept for |
|---|---|---|
| Your account | Email and login credentials | Until you delete your account |
| Billing | Subscription tier and status | Until you delete your account |
| Client context | Care goals and notes you type in yourself — not consultation content | Until you delete them |
| Usage counter | How many documents you generated this period | Rolling 12 months |
What we never store
Not encrypted-at-rest. Not anonymised. Not held briefly for debugging. Never written down at all.
- Session audio, in any format
- Transcripts, full or partial
- Generated notes, drafts or final
- Client names — you choose what identifiers to enter, and initials are enough
- Anything said in the room, in any derived or summarised form
Consent, every time
Australian recording law and your professional obligations both require your client’s agreement. The app asks before every recording — not once at signup, not buried in settings. You stay the one who obtains and records that consent; we make sure you can’t skip the step by accident.
Error logs
Crash and error reporting is scrubbed so audio, transcripts and note text can never appear in a log line. Accidental capture in logging is the most common way a promise like ours quietly breaks, so we audit it as a recurring review, not a one-off tick.
Australian Privacy Principles
ScribeUp is built for Australia and handles your account data under the APPs. You can request a copy of everything held about you, or delete your account and take the lot with it, by emailing us. Your clients’ session content isn’t covered by that request for the simple reason that we don’t have any.
What this means if we disappear
If ScribeUp shut down tomorrow, no client session would be sitting in an acquirer’s database, because none of it was ever there. Your notes are already in your EHR, where you put them.
Still want to poke holes in it?
Good — you should. Email us with the hardest question you have about where your clients’ words go, and you’ll get a straight answer from the person who built it.