Privacy Policy
Last updated: September 16, 2026
This Privacy Policy describes how Firen AI (“we,” “us,” or “our”) collects, uses, and protects information in connection with our software and related services (the “Service”).
By using the Service, you agree to the collection and use of information as described in this Policy.
1. Overview
We minimize the personal information we collect through the Service. Any Protected Health Information (PHI) we process on behalf of a customer is handled under a Business Associate Agreement (BAA) with that customer, as described in Section 3.
2. What We Collect and Why
We collect two kinds of information:
- Usage and product data — feature usage events, session counts, error logs, performance metrics, and device metadata. Used to operate, secure, improve, and support the Service. This data does not include PHI or audio content.
- Account and contact information — name, email, practice or organization name, and billing or subscription status (via payment providers). Used to manage your subscription, provide support, and communicate with you about the Service.
We do not sell personal data.
3. HIPAA & PHI Handling
When Firen AI processes PHI on behalf of a customer who is a HIPAA covered entity, such processing is governed by a Business Associate Agreement (BAA) between Firen AI and that customer. The BAA sets out permitted uses and disclosures of PHI, safeguards, breach notification, and return or destruction of PHI in accordance with HIPAA.
Customers are responsible for HIPAA compliance within their own practice, including obtaining any patient notices, consents, or authorizations required by applicable law.
4. Data Storage & Security
We take reasonable technical and organizational measures to protect non-PHI data we collect, including:
- Secure infrastructure
- Access controls
- Encryption where appropriate
However, no system can be guaranteed to be 100% secure.
5. Third-Party Services
We may use trusted third-party providers to support:
- Analytics
- Error monitoring
- Payment processing
- Infrastructure hosting
These providers are contractually restricted to using data only to perform services on our behalf. Where a provider handles PHI, it does so under a written agreement satisfying HIPAA business-associate requirements.
6. Data Retention
We retain non-PHI data only as long as necessary to:
- Operate the Service
- Meet legal or accounting obligations
- Improve product functionality
You may request deletion of your account data by contacting us.
7. Your Rights
Where applicable by law, you may request access to, correction of, deletion of, or a portable copy of your personal information by emailing hello@firen.ai.
8. Changes to This Policy
We may update this Privacy Policy from time to time.
- For material changes (such as new categories of data collected, new uses, or new sharing), we will notify account holders by email.
- For non-material changes (clarifications, formatting, or wording updates), we will update the “Last updated” date at the top of this page.
Your continued use of the Service after the effective date of an update constitutes acceptance of the updated Policy.
9. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: