Maestra

Privacy Policy

Last updated: April 21, 2026

1. The Short Version

All sensitive patient and clinical data in Maestra is end-to-end encrypted on your device. Maestra cannot read it: not your patients' names, notes, dates, or transcripts. Only you, with your password or Recovery Key, can decrypt your data.

2. What Data Maestra Handles

To run the service, Maestra stores basic account information (such as your email address, display name, and profession) along with the structural metadata needed to keep your data in sync across your devices. This information is handled without encryption because it is needed to operate your account.

All clinical content, including patient files, appointment details, notes, transcriptions, and voice fingerprints used to recognise speakers in transcripts, is encrypted on your device before it ever reaches Maestra's servers. Maestra stores it as an opaque encrypted payload and cannot read, search, or process it in any way.

3. How Encryption Works

Your clinical data is encrypted on your device using your password before it reaches Maestra's servers. Maestra does not hold the keys needed to decrypt it. A Recovery Key provides an alternate way to unlock your data if you forget your password. Keep it somewhere safe, as Maestra cannot help you recover it.

4. AI and Transcription

Some AI-assisted features, including voice transcription and the visit assistant, process your clinical content through third-party AI providers. To make this work, the audio you record and the messages you send to the visit assistant pass through a Maestra relay service that forwards them to the AI provider in plaintext. Maestra's main servers never see this content; the relay holds it only briefly in memory while the request is in flight, and never persists it. The AI providers used today are listed in the Subprocessors section below.

5. Subprocessors

Maestra uses the following third-party services to operate:

  • Apple App Store / Google Play Store / Stripe: subscription billing and app distribution
  • RevenueCat: subscription state management
  • Modal Labs: voice transcription (audio is processed in plaintext, never stored)
  • Eden AI (EU): visit assistant LLM routing, processed in the EU (messages are processed in plaintext, never stored)
  • Resend: sending one-time verification codes for sign-in and account changes
  • Sentry: anonymised crash and error reporting; no patient data is included in error reports

Maestra's primary servers and database are hosted in Germany (Hetzner). Encrypted patient data never leaves the EU at rest. The visit assistant runs EU-hosted (Eden AI); voice transcription (Modal Labs) is processed in the United States.

6. Your Rights

You can export your records at any time using the "Export patient records" option in the app under About Maestra. It produces a full, decrypted copy (structured data plus a PDF per patient) on your device. Because Maestra does not hold your decryption keys, only you can generate this export. Maestra cannot produce a decrypted copy from its servers.

To delete your account, use the "Request account deletion" option in the app under About Maestra, or email [email protected] from the email associated with the account. Deletion is permanent and cannot be undone.

7. Data Retention

Maestra retains your data for as long as your account is active. A documented retention schedule governs how long each category of data is kept. If you ask Maestra to delete your account, all data associated with it is permanently removed from Maestra's servers shortly after the request is processed. Because Maestra does not hold your decryption keys, deletion is final.

8. Children

Maestra is intended for use by licensed healthcare professionals and is not directed at individuals under 18 years of age. Maestra does not knowingly collect personal data from minors.

9. Changes & Contact

Maestra's Data Protection Officer (Encarregado de Dados) is Diogo Carpanedo do Carmo, reachable at [email protected]. This policy may be updated from time to time. Changes will be reflected by an updated date at the top of this page. Questions or data requests? Email [email protected].