Effective date: October 25, 2026 Developer / contact: Hisham Salahuddin, MD angiovault@gmail.com
AngioVault is an app for interventional physicians to photograph, organise, annotate, de-identify and share their own procedural images. It is built to keep everything on your device.
What the app stores, and where
Case images, videos, patient identifiers you enter or scan (name, MRN, date of birth, age, sex), procedure details, clinical scores, complications, CPT codes, notes and follow-up dates are stored only on your iPhone / iPad / Mac, in the app's private container, encrypted by iOS with Complete data protection, and excluded from iCloud and iTunes backups.
The app has no server. It does not transmit case data, images or identifiers anywhere unless you take an explicit action (Share, Save to Photos, Email to staff, Save to a shared folder, Export).
The Scan ID picture of a patient banner is read on-device and discarded immediately; only the extracted text fields are kept.
A local export log records what you shared and when (never the content).
Permissions the app asks for, and why
Camera Photographing images off the monitor; scanning the ID banner. Leaves the device? No
Photo library Importing images; saving collages / exports when you choose. Leaves the device? Only what you save
Face ID / Touch ID Unlocking the app. Leaves the device? No
Location (while using) Suggesting the hospital you are at. Leaves the device? No; hospital name search uses Apple Maps
Microphone + Speech recognition Dictating notes and captions. Leaves the device? Apple on-device recognition when the device supports it; otherwise Apple's speech service per Apple's privacy terms
Notifications Follow-up reminders (local). Leaves the device? No
When data leaves your device always by your action
Share / Save to Photos / Email to staff / shared folder / Shortcuts export: the files you choose go where you send them. Non-de-identified media shared to colleagues is behind a consent record you control.
Hospital search sends your typed hospital name to Apple Maps (MKLocalSearch).
Reference links (DOIs) open in Safari.
Feedback opens a pre-addressed email in your Mail app; nothing is sent automatically.
Research assistant Claude API mode (off by default). If you turn it on and enter your own Anthropic API key, each question you ask is sent to Anthropic's API together with a de-identified summary of your cases (procedure year, age or "90+", sex, procedure, hospital, scores, complications, CPT codes). Never names, medical record numbers, dates of birth, full dates, notes or images. Anthropic processes it under your own API agreement with them, not ours. With the mode off, the assistant answers entirely on your device.
What we do not do
No analytics, advertising, tracking or third-party SDKs.
No accounts, no cloud storage operated by us, no remote access to your data. The optional Claude API mode above is the only feature that sends anything to a third party, and only with your own key.
We never see your data. If you delete the app, its data is deleted with it.
Your responsibilities
You are the custodian of any protected health information you enter. Follow your institution's policies for consent, sharing and retention. The app's de-identification tools assist you; verify results before sharing.
Children
AngioVault is a professional tool not intended for anyone under 18.
Changes
We will post any change to this page and update the effective date.
Contact
angiovault@gmail.com Lancaster, California, USA