Data & Security

How we handle your data and your patients' privacy, your microphone and compliance, in plain language. The full legal detail is in our Terms and Privacy Policy.

Version 2.0 · Last updated 20 October 2026

Who is responsible for patient information

Your practice is the data controller for patient information and decides how it is used. Breez is your data processor and handles it on your behalf. Our data processing agreement is Schedule 2 of our Terms. If you would like a copy signed by both parties, just email support@bree-z.com.

Your notes & patient privacy

Breez records the appointment, turns the speech into a transcript and drafts a clinical note. Your clinician checks every note before it goes into the patient's record. We remove patients' names and other details that identify them from transcripts and notes.

When you report a problem, our support team may review the note to fix it and improve your templates. We test improvements on demo and synthetic recordings. We never use your data for marketing, profiling or training AI models.

Telling your patients

Before recording, your practice tells each patient about Breez and asks their permission, as the GDC requires. For a child, it also tells their parent or guardian. Clinicians confirm this once a day in the Breez app.

Where your data is stored & how it's protected

  • Your data is stored by Cloudflare, in the UK and the EU, and processed in the UK and the EU.
  • Any transfer outside the UK uses the safeguards UK law provides. You can ask us for a copy of these safeguards at support@bree-z.com.
  • Your data is encrypted in transit and at rest.
  • We test our security regularly.
  • Our test systems are kept separate from live data.
  • Staff access to recordings, transcripts and notes is logged.

How long we keep your data

  • Audio recordings: deleted 30 days after the recording.
  • Transcripts and notes: kept while your account is active. Your practice decides how long (NHS guidance is 11 years for adults and until age 25 for children). We delete or return them when your practice asks.
  • Billing records: 6 years, as UK tax law requires.
  • Support messages and leads: 2 years after our last contact.
  • Website analytics and error reports: up to 12 months.

See our Privacy Policy for full detail.

What happens if you cancel

  • For 30 days after your subscription ends, you can download your notes and transcripts.
  • We then delete your practice's data within a further 30 days. We keep only billing records and support messages, for the periods above.
  • We confirm the deletion in writing if you ask.

Your microphone: returns & warranty

  • The microphone is included in your subscription and stays Breez property.
  • If you cancel, return it within 30 days using the prepaid label we send you. If it isn't returned, or is returned damaged, a fee of £100 may apply.
  • Damaged on arrival? Contact us within 48 hours for a free replacement.
  • A 1-year limited warranty covers manufacturing defects. Replacement units for accidental damage are £75.

Compliance

We design Breez to help your practice meet its UK GDPR duties and the GDC Standards. Bosco AI LTD is registered with the Information Commissioner's Office (ICO), registration number ZB916696. For the binding detail, see our Terms of Service and Privacy Policy.

Questions about your data? Get in touch and we'll be glad to help.