Privacy & Security

Medical Voices is a free clinical-English podcast. We try to keep the data we collect to the minimum needed to deliver transcripts and let you know when a new episode is out.

What we collect

Your email address

When you request a transcript, we store your email address along with the language (English or French) and which episodes you have downloaded. We use this to send you the transcript link and, if you stay subscribed, to let you know when a new episode in the same language goes live.

Contact form messages

Messages sent through the contact form are forwarded to our team inbox by email and are protected by a Cloudflare Turnstile challenge to limit automated abuse.

What we do not collect

We do not run third-party advertising trackers on this site and we do not sell or rent your email address.

Services we rely on

Medical Voices runs on the Lovable Cloud platform, which provides our hosting, database, and file storage. Email delivery (transcripts, episode announcements, contact form) goes through Resend. The contact form bot-protection challenge is provided by Cloudflare Turnstile.

These providers process the data described above on our behalf so that the site can function.

Security controls in place

• Transcript PDFs are stored in a private bucket. Downloads are served through short-lived signed links that expire automatically.
• Transcript download links sent by email expire after 24 hours and are single-use.
• Our database has row-level access rules enabled, and direct access to subscriber data and storage is restricted to trusted server-side code.
• Administrative tools on the site are password-protected and server-validated.
• The contact form is protected by Cloudflare Turnstile to reduce spam and automated submissions.
• Traffic to medicalvoices.health is served over HTTPS.

This page describes the controls we have enabled today. It is not a security certification and is not independently audited.

Unsubscribing and deletion

Every email we send includes a one-click unsubscribe link. Clicking it removes you from future episode announcements immediately.

If you would like your email address and download history removed from our records entirely, contact us from the address you subscribed with and we will take care of it.

Cookies and analytics

The site uses only the technical storage required to remember your language preference and to keep the site working. We do not set advertising or cross-site tracking cookies.

Reporting a security issue

If you think you have found a security or privacy issue with the site, please get in touch and include enough detail for us to reproduce it. We appreciate responsible disclosure and will respond as quickly as we can.