Casebound

Privacy policy

Privacy policy for Casebound.

Effective date: 6 September 2026

Publisher: Mihail Duchev

Contact: mihail.duchev@icloud.com

Scope

This policy covers the official App Store editions of Casebound for Mac and Casebound Recorder for iPhone and iPad, and the Google Play edition of Casebound Recorder for Android. Casebound is a documentation aid for clinicians. You decide whether recording and processing a particular session is appropriate and permitted. Obtain the required participant consent before recording.

Clinical information stays on your devices

Casebound processes imported or recorded audio, transcripts, clinician profiles, client codes, note drafts, approved notes, treatment plans and optional voice enrollment on your Mac. It does not send this content to the publisher or to an AI inference service. Generated text can contain errors. A clinician must review every draft and remains responsible for the final record.

Storage and deletion

The Mac app uses encrypted clinical storage and stores encryption credentials in the macOS Keychain. Unlocked records are visible to anyone with access to your unlocked app. Set an idle lock interval and protect your Mac account. Audio retention is configurable; deleting audio on approval is the default. Transcripts and notes follow the settings you choose. Exports are readable documents; backups and export destinations are chosen by you. Cloud-synced folders or third-party backup tools you choose may copy those files elsewhere. The publisher cannot recover a forgotten profile passphrase or your deleted records.

Recorder transfers

On iPhone and iPad, Casebound Recorder records audio in private app storage protected by iOS Data Protection. On Android, recordings are held in private, credential-encrypted app storage. Use a device passcode or screen lock. Recordings are excluded from cloud backups and device migration. They remain on the recorder until you delete them or a paired Mac confirms successful receipt. A local-network connection, ephemeral encryption keys and a six-digit comparison on both devices protect the transfer. Confirm only codes for a transfer you initiated. The Mac retains an encrypted inbox item until you assign or delete it. After successful transfer, deleting the recorder app does not delete the Mac copy. Deleting the recorder app deletes its remaining local recordings.

Network activity

Initial Mac setup downloads approximately 3.94 GB of model and tokenizer files from Hugging Face and its delivery providers. The app verifies downloaded files before using them. These hosts receive connection information such as your IP address, requested files and request time under their own policies. No clinical content is included in model download requests. Downloads can be retried when interrupted. After models are installed, core transcription and note drafting run locally. Optional Apple speech-model setup, App Store installation and updates, and opening support or privacy web pages use the relevant platform or website services. Local recorder transfers use your local network, with no publisher relay service.

Permissions

Microphone access enables recording. Local-network access enables recorder discovery and transfer. The Mac app accesses files or folders you select for imports, exports, model folders or backups. You can change permissions in system settings. The apps do not request contacts, location, advertising identifiers, photos or health-platform records.

Accounts, payments and analytics

There is no Casebound cloud account, advertising SDK or in-app analytics service. Apple manages App Store purchases, refunds, installation and updates under its policies. Google manages Play Store installation and updates under its policies. The Android companion is free. Platform crash reports may be available through Apple or Google under your platform settings and their policies. The publisher does not intentionally include clinical content in application logs.

Support and this website

If you contact mihail.duchev@icloud.com, the publisher receives the message and contact details you provide and uses them to respond. Do not send recordings, transcripts, patient names or other identifiable clinical information. Supply the app version, device/OS version and a description using fictional examples. Support messages are kept only as necessary to resolve requests and meet applicable obligations. Request deletion using the same contact address. The public site uses no advertising or analytics cookies; the hosting provider may retain technical access and security logs. Hosting and email services process technical requests and support correspondence on the publisher’s behalf.

Your choices and rights

You control records held on your devices. Use the app's deletion, export and retention controls. The publisher cannot access or delete local clinical records remotely. For personal information you provided directly to the publisher, contact mihail.duchev@icloud.com to request access, correction or deletion, or to exercise other applicable data-protection rights. You may also contact your local supervisory authority. Clinical participants should contact their clinician about their records.

Children and clinical responsibility

The apps are intended for adult professional users, not direct use by children. A clinician may handle information about minors only with appropriate authorization. The apps do not provide medical advice, emergency monitoring or autonomous diagnosis or treatment decisions.

Changes

Material changes will be reflected in the effective date and the public policy at https://caseboundapp.com/privacy. This policy describes the official store editions; separately operated services have their own policies.

Website hosting

This static website is hosted by Cloudflare. It has no publisher-added analytics, advertising trackers, contact form, or mailing-list form. Cloudflare may process ordinary delivery and security information, including IP addresses, browser information, requested URLs, and request times. Provider processing and retention follow the applicable service configuration and Cloudflare Privacy Policy. The app data practices described above are separate from these website requests.