Terms of Use

1. Who we are and acceptance

The Liora Health platform (legal name: JG CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA; CNPJ: 48.185.770/0001-82) is intended for physicians, psychologists and other healthcare professionals with an active registration with their professional council. By signing up for or using the platform, you declare that you have read and accepted these Terms and the Privacy Notice. Contact: devaocubome@gmail.com.

2. The service

Liora Health offers clinical documentation tools. With the patient's authorization, the platform records or receives the consultation audio, transcribes the conversation and uses artificial intelligence to generate a draft medical record (or session record) that the professional reviews, corrects and signs. The platform also stores the medical records, records the patients' consents and lets you export them.

Liora Health does not provide healthcare services, does not make diagnoses and does not decide on treatment. Artificial intelligence is a support tool: the draft may contain omissions or errors and has no clinical value until it is reviewed and signed by the professional.

3. Sign-up and proper use

You must provide truthful information, keep your professional registration (CRM, CRP or equivalent) active and keep your password confidential; actions taken with your account are your responsibility. Use the platform only in the practice of your profession, with patients you care for, and never to record anyone without the authorization described in section 4. It is forbidden to try to access other users' data, to bypass security measures or to use the platform for unlawful purposes.

4. The professional's responsibilities and the use of artificial intelligence

You are responsible for the care provided, for clinical decisions and for the final content of the medical record. Before recording, it is up to you to inform the patient and obtain consent in the Free and Informed Consent Form (TCLE) shown by the platform, in writing where the rules of your profession require it; to respect the patient's refusal of artificial intelligence; and, for children, adolescents or legally incapacitated persons, to obtain the consent of their legal guardians.

Physicians must comply with CFM Resolution No. 2.454/2026: use artificial intelligence only as support, remain ultimately responsible for decisions, record the use of the tool in the medical record, inform the patient and respect an informed refusal. Psychologists must comply with CFP Resolution No. 13/2022, which requires free, prior, informed and written consent to record sessions and, for a child, adolescent or legally incapacitated person, the consent of the guardians and the assent of the person being treated. The professional is also responsible for keeping the medical record for the required retention period and for answering patients' requests as the controller of their data (section 5).

5. Roles in the processing of personal data

For your own sign-up, usage and billing data, Liora Health is the controller and processes it as described in the Privacy Notice. For your patients' data, you (or the clinic on whose behalf you work) are the controller, and Liora Health is the processor: it processes this data only on your behalf and according to your instructions. Sections 5 to 13 form the personal data processing agreement between you and Liora Health (Art. 39 of the LGPD) and, regarding patients' data, prevail over the other provisions of these Terms.

6. Subject matter, purpose and instructions

The subject matter of the processing carried out by Liora Health as processor is the data of the patients you register or record on the platform: name, phone number, consultation audio, transcript, medical record, consents and the patient's preferences regarding the use of artificial intelligence, which include sensitive health data. The only purpose is to provide you with the service described in section 2.

Your instructions are these Terms, the settings you choose on the platform and the consents you record for each patient: without a recorded consent, the platform does not record, does not transcribe and does not process the content with artificial intelligence. Liora Health does not use patients' data for its own purposes, does not sell it, does not use it to train artificial intelligence models and only produces usage statistics that do not identify patients, to operate and bill the service. As for the transcription and language model providers, Liora Health currently has no contractual guarantee that they do not retain the data or use it to train models; each provider's policies apply. If an instruction appears to be unlawful, Liora Health will tell you and may decline to follow it.

7. Confidentiality

Liora Health keeps patients' data confidential. Access is restricted to the people strictly needed for operations and support, who are bound by confidentiality, and only happens when needed to provide the service, fix failures or fulfil a request from you. The confidentiality obligation continues after the agreement ends. Data is only handed over to authorities where there is a legal obligation or an order from a competent authority, and Liora Health will tell you unless the law forbids it.

8. Sub-processors

You authorize Liora Health to engage the sub-processors in the table below, which process data only for the purposes shown. Liora Health uses providers that offer security and data protection commitments in their standard terms, and is liable to you for their compliance with this agreement. Before adding or replacing a sub-processor that processes patients' data, Liora Health will notify you at your registered email at least 15 days in advance; if you disagree, you may end your subscription without penalty.

9. International transfer

The sub-processors process data on servers located in the United States, a country without an adequacy decision from the ANPD; for the language models, the provider and the region of each call are chosen by OpenRouter, with no contractual guarantee of country. For patients' data, the transfer relies on the specific and highlighted consent the patient gives in the TCLE, which discloses the international nature of the operation (Art. 33, VIII, of the LGPD): the recording item discloses that the audio, the transcript and the medical record are kept in the cloud in the United States, and a separate item authorizes sending them to artificial intelligence services; you collect and record these consents on the platform, and without the second one the audio is not sent for transcription and the text is not sent to the language models. Liora Health has not signed the ANPD standard contractual clauses (CD/ANPD Resolution No. 19/2024) with the sub-processors. Liora Health will give you the information it has so that you can meet the transparency obligations regarding the transfer and keeps the description up to date in the Privacy Notice.

10. Security

Liora Health adopts technical and administrative measures proportionate to the risk: encrypted communication (HTTPS) between the browser, the platform and the providers; consultation audio encrypted at rest with envelope encryption (AES-256-GCM), with the key kept separate from the storage; dashboard access by password, with a session that expires after 30 days without use; separation of each professional's data; automatic replacement of the patient's name, CPF, phone number and email with placeholders before the text is sent to the language models, when they are recognized; and a record of every use of artificial intelligence. Transcripts and medical records are kept in the infrastructure provider's database, with access restricted by credentials.

11. Security incidents

If Liora Health becomes aware of a security incident affecting your patients' data, it will notify you at your registered email within 24 hours, with the information it has, and will supplement it afterwards: nature of the data affected, patients involved, protection measures in place, risks and measures taken. As controller, you are responsible for notifying the ANPD and the patients of an incident that may cause relevant risk or harm, within 3 business days of becoming aware of it (CD/ANPD Resolution No. 15/2024); Liora Health will support this notification with the necessary technical information. Incidents involving the professional's own data are notified by Liora Health, as controller.

12. Termination, return and deletion

After cancellation, you keep full access until the end of the period already paid for. After that, if the subscription is billed through Stripe, the account works in read-only mode: you can still view and export medical records, handle patients' requests and record consent revocations, but you cannot start new consultations or use artificial intelligence. If the subscription is billed through RevenueCat, it deactivates the account when it expires, and sign-in stops working; in that case, or whenever you cannot sign in, request the export at devaocubome@gmail.com.

Liora Health keeps the data stored after termination, without automatic deletion, so that you can meet the medical record retention period (for physicians, at least 20 years, Law No. 13.787/2018; for psychologists, at least 5 years, CFP Resolution No. 1/2009). You may request the return (export) or deletion of your patients' data at devaocubome@gmail.com; deletion only happens at your request, because keeping the medical record is your obligation. Audio follows the deletion rule described in the Privacy Notice.

If you cancel, access continues until the end of the period you already paid for. After that, the account becomes read and export only: nothing is deleted, and subscribing again restores everything.

13. Audit and cooperation

At your request, made at devaocubome@gmail.com, Liora Health will provide the information needed to demonstrate compliance with this agreement, such as the list of sub-processors, the description of the security measures, the consent records and the records of artificial intelligence use for your patients, and will help you respond to requests from patients, the ANPD and professional councils. On-site or third-party inspections require prior agreement on scope, date and confidentiality and may not expose other customers' data.

14. Payment and cancellation

The subscription is billed on a recurring basis by the payment provider, according to the chosen plan. You can cancel at any time, with no lock-in or penalty; access continues until the end of the paid period, as described in section 12.

15. Limitation of liability

Liora Health is liable for the damage it causes by breaching these Terms or data protection law. Liora Health is not liable for clinical decisions, for the content of a medical record signed without proper review, for the lack of patient consent that the professional had to obtain, or for outages caused by third parties beyond its reasonable control. To the extent permitted by law, and except in cases of wilful misconduct or gross negligence and of damage to data subjects, Liora Health's liability to the professional is limited to the amount the professional paid in the 12 months before the event.

16. Changes, governing law and jurisdiction

These Terms may be updated; relevant changes will be announced at your registered email at least 15 days in advance, and using the platform after they take effect means you agree to them. These Terms are governed by the laws of the Federative Republic of Brazil. The courts of the professional's place of residence are chosen to settle any dispute, unless the law provides otherwise.