Vocara is an AI-assisted clinical documentation tool built for New Zealand allied health practitioners. Vocara is operated by Lachlan Kennedy, University of Canterbury, Christchurch, New Zealand. This Privacy Policy explains how we collect, use, and protect information in connection with your use of Vocara.
For privacy enquiries, contact: lachlan@vocara.co.nz
Account information: Your name, discipline, practice name, ACC provider number, and email address when you sign up.
Session metadata: Timestamps, session duration, ACC claim codes, and note generation activity. We do not store patient names, NHI numbers, or clinical content on our servers.
Usage data: Basic app usage logs (page views, feature usage) to help us improve the product. These logs contain no patient or clinical information.
We do not sell your information to third parties. We do not use your clinical content to train AI models.
You: You have full access to all information in your account.
Vocara staff: Only authorised staff can access account information, and only when required to operate or troubleshoot the service. No staff can access patient clinical content.
Third-party service providers: We use the following services to operate Vocara:
We do not share your information with ACC, Healthlink, or any government agency unless required by law.
Vocara stores account data on servers located in Australia and New Zealand. All data is encrypted in transit (TLS 1.2+) and at rest.
Clinical notes are currently stored in your browser's local storage. They are not backed up to Vocara's servers. If you clear your browser data, your notes will be deleted. We recommend exporting signed notes as PDF before clearing browser data.
Under the New Zealand Privacy Act 2020, you have the right to:
To exercise these rights, contact us at lachlan@vocara.co.nz. We will respond within 20 working days as required by law.
Vocara is a tool for practitioners — we do not hold a direct relationship with patients. Under the Health Information Privacy Code 2020, the treating practitioner is responsible for:
Patients seeking access to their clinical records should contact their treating practitioner directly, not Vocara.
You may request deletion of your account at any time by contacting lachlan@vocara.co.nz. Upon receiving your request, we will:
Note: Clinical notes stored in your browser's local storage must be cleared by you in your browser settings. Vocara cannot remotely delete data stored locally on your device.
Vocara uses essential cookies only — for session management and authentication. We do not use advertising cookies or third-party tracking pixels.
We use anonymised analytics to understand how practitioners use the product. These analytics contain no personally identifiable or patient information.
If you access Vocara from within the European Economic Area (EEA), the General Data Protection Regulation (GDPR) may apply to our processing of your personal data. In addition to the rights under the NZ Privacy Act 2020, you have the right to:
Our lawful basis for processing your account data is contract performance (to provide the Vocara service you signed up for). We process health-related data only as a data processor on your behalf, under your control.
To exercise any GDPR rights, contact lachlan@vocara.co.nz.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the app. The date at the top of this page reflects the most recent update.
Continued use of Vocara after changes are posted constitutes your acceptance of the updated policy.
For any privacy concerns, requests, or complaints:
Email: lachlan@vocara.co.nz
Vocara · Lachlan Kennedy · University of Canterbury · Private Bag 4800 · Christchurch 8140 · New Zealand
Response time: Within 20 working days (NZ Privacy Act 2020 requirement)
If you are not satisfied with our response, you may complain to the NZ Privacy Commissioner at privacy.org.nz.