Privacy

Español · English

Last updated: September 19, 2026

This is an English translation of our privacy policy, provided for convenience. The Spanish version is the authoritative one; if the two ever disagree, the Spanish text governs.

Who is responsible

The juunoslabs.com website is operated by JUUNOS Labs, a company of JUUNOS LLC. You can reach us at contacto@juunoslabs.com.

What data we collect

The website has no forms and no accounts. If you email us, we use your message only to reply to you.

This section and the two that follow are about the website. Data handling for JUUNOS Voz - the browser extension and the desktop apps - is described further down, in its own section.

Google Analytics

It is only enabled if you accept it in the cookie notice. It measures pages and sections viewed, device and browser type, approximate location (country and city), and clicks on contact links. We do not use advertising, remarketing, or advertising profiles; ad storage is disabled. The provider is Google LLC, which may process the data outside Costa Rica, including in the United States.

Cookies

• _ga and _ga_<id> from Google Analytics, only after you accept.
• Your choice is stored in the browser's local storage (key juunos_consent), not in a cookie.

How to change your choice

Use the "Cookie preferences" button at the bottom of any page, or clear the site's cookies and data from your browser. If you decline, Analytics cookies are deleted.

JUUNOS Voz: the browser extension and the desktop apps

This section covers JUUNOS Voz: the browser extension for Chrome, Microsoft Edge, and Firefox, and the desktop applications for macOS and Windows. They are separate products from the website and handle different data. They are used with an account issued by the contracting healthcare institution; there is no open public sign-up.

Who is responsible for clinical data

The healthcare institution that contracts JUUNOS Voz is the controller of its patients' clinical data. JUUNOS Labs processes that data on the institution's behalf, following its instructions and the terms of the contract between us, and never for purposes of our own. If you are a patient and want to exercise your rights over your data, your point of contact is the healthcare center that treated you; we handle such requests through that institution.

For the account data of the person dictating - the healthcare professional - JUUNOS Labs is the controller, and those requests can be sent to us directly at contacto@juunoslabs.com.

What data we handle

• Microphone audio, only while a dictation is in progress. The microphone opens when the person starts dictating and closes when they stop; it does not stay listening.
• The transcribed text, which in this product is clinical documentation.
• Account data for the person dictating: the name and email address from sign-in, and the institution they belong to.
• Usage records for each dictation: duration, number of characters produced, speech model used, whether an error occurred, program version, operating system, and language. Never the dictated text - we keep its character count, not its content.
• On sign-in and sign-out only: the IP address and the browser or system used, so that access to an account can be audited. These are personal data under Costa Rica's Law 8968 and are treated as such.

What we do not collect

• The content of the pages you visit, their addresses, or your browsing history. The extension needs permission on all sites because each hospital's electronic health record runs on its own private address, which we cannot list in advance; that permission is used to write the dictation into the text field, not to read the page.
• Your keystrokes. The extension listens for the shortcut key to know when to open the microphone; those keystrokes are neither stored nor transmitted.
• Your location, contacts, email, calendar, or files.

Where the data goes

• Microsoft Azure AI Speech (Microsoft Corporation) receives the audio in order to transcribe it. The program connects directly to the service using a ten-minute temporary credential issued by our server; the provider key never reaches the person's device.
• Our server, at voz.juunoslabs.com, authorizes dictation, issues that temporary credential, and receives the usage records. When the direct connection to the speech provider fails, the audio passes through this server as a fallback.
• Google LLC and Microsoft Corporation process sign-in when a Google or Microsoft Entra ID account is used.

These providers may process the data outside Costa Rica, including in the United States. None of them receives data for purposes of their own: they process it on our instructions, in order to provide the service.

We do not sell personal data, do not disclose it to third parties beyond what is described here, and do not use it for advertising, profiling, or credit assessment.

What is not stored

The dictated text is not stored on our servers, nor on the device beyond the dictation in progress: it is written into the text field where the person asked for it, and our involvement ends there. What remains is wherever the hospital saved it, which is its record and its responsibility.

On the device, the program stores the signed-in session and its configuration. The state of the dictation in progress and the temporary speech credential live in memory and disappear when the browser or the application closes.

How long we keep data

Account data is kept for as long as the account is active and the contract with the institution is in force. Usage records and the access log are kept for as long as needed to operate the service, bill for it, and answer the institution's questions, and are deleted when that need ends. The institution may ask us to delete its staff's accounts at any time.

The microphone permission

The microphone requires explicit permission, granted by the browser in the case of the extension and by the operating system in the case of the desktop applications. It is requested the first time you dictate and can be revoked at any time from your browser's or system's settings; without that permission the product cannot dictate, and it does not attempt any other route.

Support and contact forms

The Support and Contact pages (in Spanish) collect what you type: name, email address, your message or description of the problem, optional technical details (application, version, operating system) and any files you attach (screenshots or PDF). We use them only to answer your request and follow up; we reply by email with a case number.

To prevent abuse, the forms use Google reCAPTCHA v3, which analyzes interaction with the page and sends data to Google; Google's Privacy Policy and Terms of Service apply. We also store an irreversible hash of your IP address and the browser user agent for security purposes.

Do not send patient data in the description, the message, or in screenshots or attachments.

Contact

For any privacy question - about the website or about JUUNOS Voz - write to contacto@juunoslabs.com. If you are a patient of a healthcare center that uses JUUNOS Voz, your point of contact is that center.