SonoCase Privacy Policy

Version 1.1. Effective date: 18 October 2026.

What SonoCase is for

SonoCase is a blank personal portfolio and recording tool for qualified healthcare professionals and students. Users add their own clips and notes; SonoCase supplies no clinical cases, diagnoses or treatment guidance. It is not a medical device. It does not diagnose, treat, cure or prevent any medical condition, and must not be used for clinical decisions or as a medical record. Always consult a qualified healthcare professional and follow your local clinical policies. SonoCase is not an accredited training course, does not assess or certify competence, and does not replace accredited programmes or college requirements such as RCEM, FUSIC, FAMUS, ASUM CCPU or ACEM credentialing. It is not affiliated with or endorsed by any of these organisations.

1. Who we are

1.1 SonoCase is published by the SonoCase developer, an independent app developer based in the United Kingdom ("we", "us", "our").

1.2 You can contact us about privacy at contact@medifries.com.

1.3 We are the data controller (under UK GDPR and the Data Protection Act 2018) and the APP entity (under the Australian Privacy Act 1988) only for the limited information described in section 4. We never receive the cases, clips and other information you keep in SonoCase on your phone (section 3), so we cannot see, use or control it.

1.4 This policy covers the SonoCase app on iPhone and Android and the SonoCase website.

2. The laws this policy follows

2.1 This policy is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Australian Privacy Act 1988 and its Australian Privacy Principles (APPs), Apple's App Store Review Guidelines (including guideline 5.1.1) and Google Play's User Data and Health apps policies.

3. Data that stays on your phone

3.1 SonoCase stores the following on your phone, and only on your phone:

• the video clips you record (with no sound), and for each clip its crop box, the marks you draw (arrows, circles, highlights and labels) and any blur boxes;
• small thumbnail pictures of the cropped clips, with blurred areas covered;
• the case text you type: title, history, findings, diagnosis, teaching point, the consent tick box, scan type and setting tags, and any optional training logbook entries (including an age band, never a date of birth);
• where the text check found writing in a clip, and whether it looked identifying (the words themselves are never saved);
• sign-off details you enter: the supervisor's name, role and email address, the date and method of sign-off, and, for sign-off in person, the supervisor's finger signature, stored as a few simplified pen strokes (numbers, not a picture);
• your settings: your own name and role, the supervisor you last used, auto-lock timing, clip length, export quality and file type, training pathways and targets, and what the store last said about your subscription (its end date, whether it renews, and whether it is a free trial);
• the record of your agreement to the Terms of Use and this policy (which version you agreed to, and when).

3.2 All of this is kept in SonoCase's private folder on your phone, which other apps cannot read.

3.3 It is kept out of backups. On iPhone, the folder is marked "excluded from backup", so it is not copied to iCloud Backup or to a computer backup. On Android, app backup is switched off, so it is not copied to Google backups or moved to a new phone by a device-to-device transfer.

3.4 This means that if you lose your phone, reset it, or delete SonoCase, the information is gone for good, unless you have made your own encrypted backup file (section 5).

3.5 SonoCase is locked with Face ID, Touch ID or your phone's passcode (on Android, your fingerprint, face or screen lock) every time it opens and when it comes back from the background. Its picture in the app switcher is hidden. If your phone has no passcode, SonoCase stays locked.

3.6 We cannot access this information. There is no copy on any server, and nothing is sent to us.

3.7 Files made only for sharing (exported videos, PDFs, PowerPoints, ZIP files and backup files) are made in a temporary folder on your phone and deleted as soon as you have shared or saved them, or when you leave that screen. The temporary folder is also emptied every time SonoCase opens.

3.8 The text check (iPhone only) reads the clip on your phone using Apple's built-in text recognition. Nothing is sent anywhere, and the words found are never saved.

4. Data we or others receive

4.1 Subscriptions: Apple and Google. If you subscribe to SonoCase Pro, you pay through the App Store (Apple) or Google Play (Google). They handle the payment, your store account and the purchase record under their own privacy policies, as independent controllers. We never receive your name, email address or payment details from them. Like every app developer, we see only sales totals and anonymous statistics in Apple's and Google's developer reports.

4.2 How SonoCase checks your subscription. SonoCase asks the App Store or Google Play app already on your phone whether this store account has SonoCase Pro, and until when. This uses Apple's and Google's own purchase systems on your phone (StoreKit and Google Play Billing). There is no other company in between and no server of ours: SonoCase saves only the answer (the end date, whether it renews, and whether it is a free trial) in its private folder (section 3). It does this when SonoCase opens, when you open the SonoCase Pro page, and when you buy or restore a subscription.

4.3 Support emails. If you email us, we receive your email address, any name in it, and what you write.

• Purpose: to reply to you and fix problems.
• Legal basis (UK GDPR): our legitimate interests (Article 6(1)(f)) in answering your message.
• Retention: we delete support emails 24 months after the conversation ends, unless we need them longer to deal with a legal claim.
• Our email is provided by Hostinger Email.
• Please never send patient information, screenshots of cases or clips in a support email.

4.4 We do not receive anything else. There is no analytics, no advertising, no crash reporting, no location, no contacts and no microphone, and no third-party software development kits that collect data.

5. Data you choose to send

5.1 Information leaves SonoCase only when you choose to send it:

• exported videos and GIFs (only the cropped clip, with blurs and marks, no sound and no hidden details such as location or date), through the share sheet or Save to Photos (iPhone) or Save to Gallery (Android);
• sign-off emails, which carry the case text, the supervisor's details, a one-page PDF and a short export of each clip, through your own email app;
• portfolio files (PDF logbook, PowerPoint, ZIP of videos, sign-off record, CSV), shared, saved to Files or printed;
• encrypted backup files and offloaded clip files, locked with a password you choose, saved to Files or shared.

5.2 These go only where you send them. Once they leave SonoCase, you are responsible for them, together with whoever or whatever service receives them (for example your email provider, iCloud Photos, Google Photos or iCloud Drive).

5.3 Before anything is shared, SonoCase asks you to check that no patient details are visible. These checks help, but they do not guarantee that a file is free of identifying details.

5.4 We cannot recover a backup or offload password. Without it, the file cannot be opened by anyone, including us.

6. Patient information

6.1 You must not record or enter identifiable patient information in SonoCase: no names, dates of birth, record or hospital numbers, addresses, phone numbers, or faces or other identifying features.

6.2 You, and where relevant your employer or health service, are responsible for de-identification, for getting consent as your local policy requires, and for following your local policies and the law.

6.3 SonoCase helps: it hides each clip until you crop away the machine's header bar, offers a text check and blur, and warns you if case text looks like it contains a name, date of birth, record number or phone number. These are aids only.

6.4 We never collect patient information. Because we never receive it, we cannot access, correct or delete it. You can, on your phone.

7. Permissions

7.1 SonoCase asks only for these permissions, and only when it needs them:

• Camera: to record clips of the ultrasound machine's screen. It is used only while the recording screen is open.
• Face ID (iPhone) or biometrics (Android): to unlock SonoCase. The phone tells SonoCase only whether it was unlocked. We never receive your face or fingerprint data.
• Photos, add only (iPhone): only when you tap Save to Photos on an exported video. SonoCase cannot see or read your photos. On Android 10 and newer, Save to Gallery needs no permission.
• Billing (Android) and internet access: only so the phone's own App Store or Google Play can handle the SonoCase Pro subscription.

7.2 SonoCase does not use the microphone, your location or your contacts, and does not track you, so it never asks for those.

8. Health information

8.1 What you keep in SonoCase may be health information. It stays on your phone (section 3).

8.2 It is never used for advertising, marketing, data mining, research or training artificial intelligence. It is never sold, rented or shared by us.

8.3 SonoCase never stores it in iCloud: case data is excluded from iCloud Backup, and SonoCase does not use iCloud Drive or CloudKit. If you choose to save an export to Photos (which may sync to iCloud Photos or Google Photos) or to save a backup file in iCloud Drive, that is your decision, and SonoCase reminds you of this before saving to Photos.

9. How long data is kept, and deleting it

9.1 Information on your phone stays until you delete it. You can delete a clip, a case, or everything at once with Settings > Your data > Delete all data. That removes every case, clip, thumbnail and sign-off, your name, role and other settings, any temporary files and the record of your agreement, and you will be asked to agree to the terms again. Only the subscription's status (its end date, renewal and trial) is kept, so SonoCase Pro stays on.

9.2 Deleting SonoCase from your phone deletes everything it stored. Because it is kept out of backups, no copy remains, except files you exported or backup files you saved elsewhere.

9.3 We hold no subscription record of our own. To ask Apple or Google about the data they hold, use Apple's Data and Privacy page (privacy.apple.com) or your Google Account's data and privacy settings (myaccount.google.com).

9.4 We do not rely on your consent for any of the processing in section 4. If we ever do, you can withdraw it at any time by emailing us. You can withdraw your agreement to the Terms of Use and this policy at any time by deleting SonoCase.

10. Your rights

10.1 Under UK GDPR you have the right to: be told how your data is used (this policy); access it; have it corrected; have it deleted; restrict how it is used; object to how it is used; and receive it in a portable form. SonoCase makes no automated decisions about you.

10.2 Under the Australian Privacy Principles you can ask to access (APP 12) or correct (APP 13) the information we hold about you. You do not have to identify yourself to use SonoCase (APP 2).

10.3 To use any of these rights, email contact@medifries.com. It is free. We may need to check that the request comes from you. We will reply within one month (UK) or 30 days (Australia).

10.4 If you are unhappy with how we handle your information, please contact us first. You can also complain to:

• the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113); or
• the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).

11. International transfers

11.1 Support emails are processed by Hostinger Email and its service providers, which may process information outside the UK. Hostinger describes its international transfer safeguards, including standard contractual clauses and the UK International Data Transfer Addendum where applicable, in its Data Processing Addendum.

11.2 For Australian users, we take reasonable steps under APP 8 to make sure our email provider handles support emails in line with the Australian Privacy Principles.

11.3 Apple and Google transfer data under their own safeguards.

12. Children

12.1 SonoCase is a personal portfolio tool for healthcare professionals and students. It is not directed at children and has no separate minimum age requirement. Cases and clips stay on the device regardless of the user's age. If a child contacts support, we use only the information needed to respond and delete any unnecessary personal information.

13. Security

13.1 SonoCase protects your information with the app lock, the private folder, the backup exclusion, and strong encryption for backup and offload files (AES-256-GCM, with the key made from your password using PBKDF2-SHA-256 at 600,000 rounds).

13.2 No security is perfect. Please keep a passcode on your phone, keep its software up to date, and keep your backup passwords safe.

13.3 Breaches. If a personal data breach affects information we or our providers hold, we will tell the ICO within 72 hours where UK GDPR requires it, and tell you without undue delay where there is a high risk to you. Where the Australian Notifiable Data Breaches scheme applies, we will notify the OAIC and the people affected.

14. Changes to this policy

14.1 Each version of this policy has a version number and an effective date, shown at the top.

14.2 If we make a material change (for example, a new kind of data or a new provider), SonoCase will show you the new policy and ask you to agree again before you carry on using it. Smaller changes (such as wording) are published here with a new version number.

14.3 Earlier versions are available on request.

15. Contact

15.1 Email contact@medifries.com. We are the SonoCase developer, based in the United Kingdom, and we deal with all questions, requests and legal notices by email.