Privacy Policy

This Privacy Policy explains how My Clinics (the "Service") collects, uses and protects personal and health information when you use the platform — including the patient portal, the doctor/staff portal, the website and the WhatsApp assistant. By using the Service, you agree to the practices described here, alongside our Terms of Service.

• Account information: name, email address and password (stored encrypted) needed to create and secure your account. If you sign in with Google, we use the minimal profile information (name and email) needed for sign-in.
• Patient records: contact details, phone number, date of birth, age, gender, blood group, medical history, allergies, medications and other details you provide for your care.
• Clinical data: appointments, prescriptions, medicines, bills and uploaded reports generated during your care.
• WhatsApp data: your phone number and the content of messages you send to the clinic's WhatsApp assistant, used to book appointments and send confirmations and reminders.
• AI chat conversations: the messages you exchange with the AI chat assistant, used to understand your request (for example, finding a doctor or booking an appointment).
• Uploaded files: medical reports and documents you upload, stored so your clinic can review them as part of your care.
• Usage information: basic technical data such as pages visited and device type, to keep the Service secure and working.

• To provide and manage appointments, rescheduling and cancellations.
• To let your clinic's doctors and staff deliver your care.
• To send appointment confirmations and reminders via WhatsApp.
• To run the AI chat assistant that helps you book appointments.
• To manage prescriptions, medicines, billing and reports.
• To maintain security, prevent fraud and comply with law.

When you message the clinic on WhatsApp, the assistant uses your message content to identify the requested doctor or service and book appointments. Reminder messages are sent only for confirmed appointments. You can ask the assistant to stop sending reminders at any time. WhatsApp itself is operated by Meta, and your use of WhatsApp is governed by WhatsApp's own terms and privacy policy; we use WhatsApp strictly to communicate with you about your care.

Reports and files you upload are stored securely and are visible only to clinic staff involved in your care and to you through your account. Files are retained for as long as needed for your care and as required by law, then securely deleted.

Your information is shared only within your clinic — with the doctors and staff directly involved in your care. Staff can see only the data of their own clinic; patients can see only their own records. We do not sell your personal or health information to third parties. We may share data with trusted service providers (such as hosting and infrastructure) who help run the Service and are bound by confidentiality obligations.

Your data is stored securely using industry-standard measures, including encryption in transit and at rest, and access controls that limit who can view records. Passwords are stored as cryptographic hashes and are never readable in plain text. Database access is restricted to authorised systems, and staff access is tied to authenticated accounts.

We keep your records for as long as your clinic needs them to provide care and to comply with applicable legal and regulatory requirements. When records are no longer needed, they are securely deleted.

You may access, correct or request deletion of your personal information by contacting your clinic. You can also update your own details through your account. You may request that we stop sending appointment reminders, and you may withdraw consent for WhatsApp-based services at any time. We will respond to legitimate requests within a reasonable time.

The Service uses essential cookies for authentication and secure sign-in. Sign-in with Google shares only the minimal profile information needed and is governed by Google's privacy policy. Messaging on WhatsApp is governed by WhatsApp's policy. We do not use tracking cookies for advertising.

The Service is not directed at children. If a child's information is provided by a parent or guardian as part of their care, it is handled under the same protections described here.

We may update this policy from time to time. Material changes will be reflected on this page with an updated date. Continued use of the Service after changes take effect means you accept the revised policy.

Questions about this policy or your data? Contact your clinic directly, by phone, or through the WhatsApp assistant. You can also reach the clinic through the contact details provided on its website.