Privacy Policy — Visit Pal

Last updated May 2026

This policy describes how Camp Cross Labs handles information specifically for Visit Pal. For the company-wide privacy policy, see Camp Cross Labs Privacy.

Information we collect

Account info: email address, display name, and sign-in identifiers (including Apple Sign-In identifier if used).
User-provided medical content: notes, symptoms, diagnoses, test results, questions, and other text you paste or dictate into the app.
Audio/voice input: short audio clips captured for dictation or visit recording, sent to our speech-to-text provider for transcription.
AI-generated outputs: plain-English explanations, scripts, and summaries returned from the AI model, stored against your account when you save them.
Subscription and purchase status: identifiers from Apple In-App Purchase and RevenueCat indicating whether you have an active Premium subscription. We do not see your payment card details.
Basic diagnostics: crash and error information needed to keep the app working. We do not run third-party advertising or behavioral analytics SDKs.

Permissions we request

Microphone — only used while you are dictating or recording a visit

Services we share data with

Anthropic (Claude) — generates the plain-English translations, scripts, and summaries from the text you provide. Anthropic states it does not use data submitted through their API to train models.
OpenAI — Whisper for voice dictation (speech-to-text) and TTS for spoken playback (text-to-speech).
Apple — Sign in with Apple (optional sign-in method) and Apple In-App Purchase for subscription billing.
RevenueCat — manages subscription state and entitlements for Premium features.

How we use information

To provide the features you use in the app.
To authenticate you and protect your account.
To diagnose problems and improve reliability.

AI & third-party processing

Visit Pal sends the text or transcript you provide to Anthropic (the Claude family of models) to generate the plain-English translations, scripts, and summaries you see in the app. Anthropic states that it does not use data submitted through their API to train their models.

Voice features are powered by OpenAI: dictation (speech-to-text) uses OpenAI Whisper, and spoken playback (text-to-speech) uses OpenAI's TTS service. When you dictate or play back audio, the relevant audio or text is sent to OpenAI to perform that conversion. Do not enter information you are not comfortable sharing with these providers.

Subscription billing is handled by Apple through In-App Purchase. RevenueCat records your subscription state and entitlements so the app can unlock Premium features and so Restore Purchases works on a new device. Apple and RevenueCat receive only the identifiers needed for billing and entitlement; they do not receive your medical content.

We do not sell personal information. We do not run advertising SDKs, cross-app trackers, or ad-network identifiers in Visit Pal.

Retention & deletion

Account data (email, display name, sign-in identifiers) is retained while your account is active and deleted when you delete your account.
User-provided medical content and AI outputs (notes, transcripts, saved visits, generated explanations) are retained until you delete the item from inside the app or delete your account.
Audio/voice clips sent for transcription are used to produce the transcript and are not retained on our servers beyond what is necessary to return the result; transcripts are retained as part of the saved item (and deleted with it).
Subscription and purchase identifiers are retained while needed for entitlement, restore, refund, and tax purposes.
Operational logs and encrypted backups may contain references to deleted records for a short rotation window — typically up to 30 days — before being overwritten.

Concrete retention durations are reviewed periodically; contact support@campcrosslabs.com if you want a current statement for compliance purposes.

Your rights

You can request access to, correction of, or deletion of your data, withdraw consent for optional processing, or export a copy of your account content at any time. Use the in-app deletion path in Settings › Account › Delete account, or contact support@campcrosslabs.com and we will respond — typically within 30 days. Depending on where you live, you may also have additional rights under laws such as the GDPR or CCPA, including the right to lodge a complaint with your local data protection authority.

Not medical advice & emergency use

Visit Pal is a consumer education and communication tool. It is not a medical device, not a diagnosis, treatment, or monitoring tool, and not a substitute for professional medical advice. AI output can be incomplete or wrong; always confirm important information with a qualified clinician before acting on it.

Do not use Visit Pal in an emergency. If you think you may have a medical emergency, call your local emergency number or go to the nearest emergency room. Visit Pal is not designed to meet HIPAA, GDPR-health, or similar regulatory requirements for protected health information; do not enter information that must be handled under those regimes.

Apple Sign-In

Apple Sign-In is offered as an optional sign-in method on iOS, including Apple's "Hide My Email" relay. Signing in with Apple shares only the data you explicitly approve.

Children

Visit Pal is not directed at children under 13 and we do not knowingly collect personal information from them.

Contact

Questions about privacy? Email support@campcrosslabs.com.