Healthcare is deeply personal and so is any healthcare data about you. Therefore, Ditto has a privacy-by-design approach to how we handle your data. We can never read or access the medical information you place in the Ditto app. Read our highlights below or have a look at our complete privacy policy.
Our four privacy promises
Your data stays private and encrypted
By default, Ditto does not store your medical data on its servers. It's your data, so you can carry it wherever you go. This is how it works:
On your own device
Your health information never leaves your phone unless you choose to share it or get an AI-summary. After processing, we delete your recording and summary from our server.
End-to-end encrypted sharing
If you share with Ditto Together, we use end-to-end AES-256 encryption to store your data on a secure server in the EU. Only you and your followers have a key to access it. No one at Ditto can ever see this data.
You control access
Your app is protected by biometric login or passcode. No one—not even us—can access what's inside. If you share with loved ones, you can always revoke and unshare.
Your backup, your choice
Ditto uses your device's built-in backup (iCloud or Google Drive). We recommend enabling encrypted backups so you can recover your information if you lose your phone.
AI that respects your privacy
Artificial Intelligence is powerful technology. We use artificial intelligence to help translate medical lingo into plain language.
We are strong advocates of responsible AI. Ditto does that by:
We never train our AI models on your data.
EU-infrastructure. Ditto's core technology, including all AI processing, runs on European servers.
Prioritize validation and governance. We work with patients and doctors to extensively test our AI before releasing new versions. Read more about how we do this.
Be on the safe side. If our AI is uncertain about something, it will tell you by saying that it cannot reliably provide you with a summary.
Do you want to know more? Here you find a detailed explanation how we use AI, in accordance with the EU AI Act.
Industry standards are the Ditto standard
Our team has built security systems for enterprises. Now we're applying that same rigor to protect your personal health information.
Ditto is GDPR and AVG compliant in its handling of personal data. Our Data Privacy Policy explains exactly how we handle your data needed to keep the app running.
We do store anonymous technical logging and quality metrics (kept on encrypted Azure servers in Sweden) needed to ensure the app works properly and safely. If you consent, we retain a few general, anonymized characteristics of summarized conversations, such as the area of care, to monitor the quality of our summaries.
Questions about security or privacy?
Reach out to Iman, who genuinely loves talking about keeping your data safe. Because clarity shouldn't come at the cost of privacy. If you have identified vulnerabilities in our technology, you can file a vulnerability disclosure report here.
