Privacy Policy

Last updated: June 2025

At Cliniwayz, we take the privacy of doctors, clinic staff, and patient data seriously. This policy explains what information we collect, how we use it, and the choices you have over your data. By using Cliniwayz, you agree to the practices described here.

1. Information We Collect

  • When you register as a doctor or clinic owner, we collect your name, email address, clinic name, and specialization.
  • Patient records you create within the app (demographics, visit history, billing details, documents) are stored on your behalf and remain your property.
  • We collect usage data such as login timestamps, pages visited, and feature interactions to improve the product.
  • Files uploaded to patient profiles (reports, images, documents) are stored securely via Vercel Blob storage.

2. How We Use Your Information

  • To provide, operate, and improve the Cliniwayz platform.
  • To send transactional communications such as appointment reminders and billing confirmations via WhatsApp or email (only with your authorisation).
  • To respond to your support queries and feedback.
  • We do not sell, rent, or share your personal data or your patients' data with third parties for marketing purposes.

3. Data Storage & Security

  • All data is stored in Google Firebase (Firestore) and Vercel infrastructure, both of which maintain SOC 2 compliance and 256-bit SSL encryption in transit and at rest.
  • Access to patient data is restricted to the authenticated doctor account that owns it. Receptionists can only access records explicitly permitted by the doctor.
  • We implement role-based access controls, authentication via Firebase Auth, and server-side token verification on every API request.

4. Patient Data & DPDP Compliance

  • As a clinic management tool, Cliniwayz acts as a data processor on behalf of the healthcare provider (you). You are responsible for obtaining consent from patients whose data you enter into the system.
  • We are committed to compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
  • Patient data is never shared with any third party without the express consent of the clinic/doctor who owns that data.

5. Cookies & Analytics

  • We use minimal session cookies required for authentication. We do not use third-party advertising or tracking cookies.
  • Basic analytics (page views, error rates) may be collected via privacy-respecting tools to help us improve the platform.

6. Data Retention

  • Your account data is retained for as long as your account is active.
  • Upon account deletion, your personal account data is removed within 30 days. Patient records will be permanently deleted within 90 days unless you export them before account closure.
  • Backup copies may persist for up to 30 additional days for disaster recovery purposes.

7. Your Rights

  • You may request access to, correction of, or deletion of your personal data at any time by contacting us.
  • You may export your patient data from the app at any time.
  • You may close your account at any time. We will process deletion requests within 30 days.

8. Changes to This Policy

  • We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date below and notify active users via email.
  • Continued use of Cliniwayz after changes constitutes your acceptance of the updated policy.

9. Contact Us

  • If you have questions about this Privacy Policy or how your data is handled, please email us at ideasring11@gmail.com.
Terms of Service·ideasring11@gmail.com·© 2026 Cliniwayz