← Back to OpTally

OpTally · Privacy & Security

How your data — and your patients' data — is protected. Last updated August 17, 2026.

Jump to: How your data is protected Terms of Service Privacy Policy

How your data is protected

OpTally was built privacy-first. The single most important idea: your case data is encrypted on your own device before it is ever uploaded, and no one — not OpTally, not your program admin, not the hosting company — can read it.

In one sentence: your cases and any patient identifiers are encrypted on your phone/computer with a key only you hold, so the server only ever stores unreadable ciphertext.

End-to-end, zero-knowledge encryption

Patient identifiers (MRN)

What your program admin can (and cannot) see

AI parsing

Voice dictation

Access & recovery

Where your data lives

Being straight about HIPAA

The Chrome extension (ACGME auto-fill)

Honest limits

Terms of Service Draft

A plain-language starting point, pending legal review.

1. Acceptance

By creating an account or using OpTally ("the Service"), operated by OpTally LLC, a Texas limited liability company ("we", "us"), you agree to these Terms. If you don't agree, don't use the Service.

2. Who can use it

OpTally is intended for physicians and physicians-in-training (residents/fellows) who are 18+ and authorized to log the cases they enter.

3. OpTally is an aid, not the official record

The Service helps you capture and organize your surgical/procedural cases. It is not the system of record. Your ACGME case log (or your specialty board's log) is the authoritative record, and you are solely responsible for the accuracy, completeness, and timely submission of your official logs.

4. Your responsibilities

5. Acceptable use

Don't use the Service unlawfully, don't attempt to breach or abuse it, don't reverse-engineer it, and don't upload content you have no right to.

5a. Pilot confidentiality

During the pilot you are welcome to talk about the Service — that it exists, what it does, and your experience using it. You may not, without our written permission: share screenshots or recordings of the Service or the browser extension; share documents, materials, or communications we provide to pilot participants; or disclose technical, design, or operational details of how the Service works, or anything else that would materially help someone build a competing version.

This does not restrict information that is publicly available through no fault of yours, that you already knew, that you develop independently without reference to the Service, or that you are legally required to disclose. This section survives the end of the pilot and of your account.

6. AI outputs

AI-generated content (codes, titles, operative notes) is provided for convenience and may contain errors. It is not medical, coding, billing, or legal advice. You must independently verify it.

7. No warranty; limitation of liability

The Service is provided "as is" and "as available," without warranties of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or non-infringement. You use it at your own risk.

To the maximum extent permitted by law, OpTally LLC and its member will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of data, loss of profits, or any consequence of an inaccuracy or omission in what you log, however caused and under any theory of liability. OpTally LLC's total liability for all claims arising from or relating to the Service will not exceed the greater of the amount you paid us for the Service in the twelve months before the claim or one hundred US dollars ($100). Some jurisdictions do not allow certain limitations; in those, our liability is limited to the fullest extent the law permits.

You are responsible for the accuracy and completeness of your official case log, for compliance with your institution's policies, and for any patient information you choose to enter. Whether your institution permits use of the Service is between you and your institution.

Governing law. These Terms are governed by the laws of the State of Texas, without regard to its conflict-of-laws rules. Any dispute arising from the Service will be brought exclusively in the state or federal courts located in Travis County, Texas, and you consent to their jurisdiction.

8. Termination & deletion

You may delete your account and data at any time from within the app. We may suspend accounts that violate these Terms.

9. Changes

We may update these Terms; material changes will be posted here with a new "last updated" date.

10. Contact

Questions: support@optally.io.

Privacy Policy Draft

What we collect, what we can't see, and who we share with. Pending legal review.

What we collect

What we cannot access

How we use what we collect

Third parties

Patient data

OpTally is designed so that no patient identifiers are ever exposed to us or to third parties. Imported notes are stripped of MRNs, patient names, initials, dates of birth and operative dates on your device before parsing, and those identifiers are never stored on a case. Note that your cases — including the MRN — do sync between your own devices through Amazon Web Services, under a Business Associate Agreement; they are encrypted on your device first, so the server stores only ciphertext it cannot read. "Never leaves your device" would be inaccurate; "never readable by us or by the AI" is the accurate claim. Your MRN is encrypted on your device before it syncs — the server only ever stores unreadable ciphertext — and the de-identified narrative used for parsing (sent to Claude) contains no MRN or patient identifiers.

Retention & your rights

Children

OpTally is not directed at anyone under 18.

Changes & contact

We'll post updates here with a new date. Questions: privacy@optally.io.

To report a security issue: security@optally.io.