Privacy & Cookies

Who is responsible

iStructure is a free tool operated by Dr Mehrdad Yazdani, United Kingdom. For any privacy question, or to exercise the rights set out below, email admin@aydayazdani.com.

iStructure is a documentation aid. It produces a clinical record only and does not give medical advice. If you use it in the course of your clinical work, you — or your employing organisation — remain the data controller for your patients' information, and you are responsible for satisfying yourself that using this tool is compatible with your own information-governance obligations.

What happens to text you paste

• Step 1 — in your browser. Before anything is sent, the page removes names and other direct identifiers from your text. This runs entirely on your own device.
• Step 2 — our server. The de-identified text is posted to our server in the United Kingdom over an encrypted connection. It is held in memory only for as long as the request takes and is not written to disk.
• Step 3 — the AI provider. The de-identified text is passed to one AI language model, which returns the structured note. It is then discarded.

Input is capped at 20,000 characters. Automated de-identification is a strong safeguard but it is not infallible — please do not paste anything you would not be willing to have processed by a third-party AI provider, and satisfy yourself the output is properly de-identified before you rely on it.

Who processes the text

One provider handles each request. The others are used only if the one before it fails:

• Google (Gemini) — United States
• OpenAI — United States
• DeepSeek — China. Used only if both of the above are unavailable.

These providers process the text to return a result and are contractually engaged on terms that do not permit training on it. Transfers outside the UK rely on the UK International Data Transfer Addendum or an equivalent safeguard.

Dictation

The microphone button is optional and off unless you press it. Where your browser can transcribe speech itself — Safari's on-device recogniser, for example — nothing is uploaded at all. Otherwise the audio is sent for transcription to Speechmatics (United Kingdom) and, if that is unavailable, to Deepgram, OpenAI or Groq (United States). Any temporary audio file created on our server is overwritten and deleted as soon as the transcript comes back. Recordings are never kept.

What is stored on your device

iStructure sets no cookies on this site. It uses your browser's local storage for two things, both of which stay on your own device and are never transmitted to us or to anyone else:

• History — your recent structured (de-identified) notes, so you can look them up again. Up to 100 entries.
• Current draft — what is in the two panels, so you do not lose your work if the page reloads.

You can erase both at any time: open History and choose Clear all, or clear site data for istructure.uk in your browser settings. Because this storage exists solely to deliver features you have asked for, it is "strictly necessary" under the Privacy and Electronic Communications Regulations and does not require a consent banner. We have chosen not to show you one rather than interrupt you with a notice that would not be true.

Cookies

There are no advertising, analytics or tracking cookies anywhere on this site. The private administration page, which only the site operator can reach, sets a single sign-in session cookie; that page is not part of the public site.

Third-party requests

Every font, script and stylesheet this page needs is served from istructure.uk itself. Simply opening the site therefore reveals your IP address to no one but our own server.

What our server records

To keep the tool free and running, and to detect abuse, the server keeps a minimal operational record for each request: a timestamp, the number of tokens used, the estimated cost, the model name, and whether the request succeeded. The text of your note is not part of that record. Our web server also keeps standard access logs, which include IP addresses, for a short period for security and troubleshooting.

Legal basis and retention

• Providing the tool — our legitimate interest in operating the service you have asked to use.
• Security, abuse prevention and cost control — our legitimate interest in keeping a free public service available.

Clinical text is not retained. Operational usage records and server logs are kept only as long as needed for those purposes.

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. Because we do not store your notes and do not hold accounts for public users, there is usually little for us to hold — but if you believe we do hold data about you, write to admin@aydayazdani.com and we will respond within one month.

If you are not satisfied, you may complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this notice changes materially, the date at the top of this page will change with it.