Trust & Privacy
Where does your patient information actually go?
Know where every piece of your work is kept.
Lithaya keeps clinical work on your side wherever it can. This page sets out what stays on your computer, what is sent for AI processing, what Lithaya stores, and the safeguards built into the product.
Your work
- Your personal libraries and saved cases
- Analyses, follow-up answers, edits and recall notes
- Academy progress and practice cases
- Your settings
The case you analyze
- The case text and your follow-up answers, when you run a report or submit an answer, with common identifiers removed first
- Passed through Lithaya to our AI provider, a third-party service in the United States, only to produce your response
- Not stored by Lithaya, not kept by our AI provider, and not used to train AI models
- For citations, only condition names (such as “asthma”) and the patient's age group (adult or child) are searched in PubMed, never the case text
- For the FDA label check, only medicine names and their route are looked up in openFDA
- Dictation: when you use Dictate, your voice is turned into text by your browser's built-in speech service (in Chrome, Google). This is handled under the browser maker's own terms, not by Lithaya's AI provider. Only you dictate, and identifiers should not be spoken.
Your account
- Name, email and profession or program
- Username, plan and its dates, last sign-in and the addresses you signed in from; your password only in a scrambled form
- Plan and billing records
- Messages you send us
- Standard security logs
- Case text passes through to produce a response; it is not saved
Will your cases be used to train AI?
Our commitments
Your library is yours
Your saved cases are stored in the Lithaya folder you choose. We do not keep a copy, and we do not need one to run the service.
No identifiable details needed
Lithaya works on the clinical picture. Before anything is sent, it removes common identifiers such as names, phone numbers, ID numbers and dates of birth, and asks you about any word that may be a name.
No selling, no training
We do not sell personal information. Your cases are not used to train AI models, by us or by our AI provider.
Encrypted connections
The website and the apps are served only over HTTPS. Everything sent for AI processing, and every source and label lookup, is encrypted in transit.
Not kept after your response
Case text passes through Lithaya to our AI provider only to produce your response. Neither Lithaya nor our AI provider keeps it afterwards.
Clinician responsibility
Lithaya is a reference tool. You remain responsible for clinical decisions and for meeting your own privacy obligations.
Clear claims. When how we handle information changes, we will update this page and our Privacy Policy before the change takes effect.
Built-in safeguards
Who else can use this?
Professional use, confirmed every time.
Each time the Clinical Workspace opens, you confirm that you are a qualified healthcare professional or a trainee working under supervision, and that you are responsible for reviewing what it produces. Until you do, nothing on the page can be used. People who are not healthcare professionals are told the tool is not for them.
- Every report is labeled as an AI-generated draft, and says which sections you edited or removed
- You confirm your review before copying, printing, emailing or exporting
- Fixed emergency notes on red flags and comparisons, and a note on any dose mentioned
- Citations come only from real articles looked up in PubMed, each linked; invented ones are removed
- Medicines checked against their FDA labels, with “Before you give” and “Check before signing” notes
- Lithaya Academy is confirmed on each new day of use and uses fictional cases only
Regulatory status
Lithaya is an informational reference, drafting and learning tool. It has not been approved, cleared or registered as a medical device in any country, and it is not intended to diagnose or treat.
Report a security concern
Email [email protected] with "Security" in the subject line. Please do not include patient information.