Draft. This text has not been reviewed by a lawyer yet and will be before Serenote opens.
Privacy policy
Last updated 23 October 2026
Serenote is built so that we hold as little about you and your patients as the service needs, and nothing we could read of your clinical work.
This website
The site sets no cookie, runs no analytics and sends nothing to anyone. The language you choose is remembered in your own browser only.
Like any web server, ours sees the technical details of each request (address, page and time) to deliver the page and keep the service safe.
What the application holds
To run your workspace we keep your email address, the public part of your passkeys, the names you give your devices, your subscription and a log of security events such as sign-ins and identity reveals.
Everything you write about your patients (notes, aliases, names, appointments, payments, documents) is encrypted on your devices before it reaches us. We store sealed envelopes with an identifier, a size and a time.
Who can read your notes
Only your enrolled devices. The keys never leave them, and a printed recovery key of twelve words is the only way back if every device is lost. We cannot recover your notes for you, and nobody at Serenote can read them.
Suggestions
Suggestions are possible only for patients you allow. When you ask for one, only the excerpt you send goes to our AI provider to produce the answer, and nothing is kept afterwards.
Where your data is
Our servers run in Casablanca, on Oracle Cloud’s Morocco West region.
Your rights
Under law 09-08 and, where it applies, the GDPR, you can ask to see, correct or delete the personal data we hold about you, or object to its use. You can also contact the CNDP.
You remain responsible for your patients’ records. Serenote keeps them, encrypted, on your behalf.
Questions about this page: write to taha.elbarbouchi@gmail.com.
Back to Serenote