Privacy Policy

Last updated: 6 July 2026

Clinaia is built privacy-first for healthcare. This policy explains what we collect, why, and the rights you have. We are GDPR-ready.

Who is responsible

For your account data (your name, email, billing), Clinaia is the data controller. For the patient records you enter into the app, you are the controller and Clinaia is your processor: we only handle that data to provide the service, on your instructions.

What we collect

  • Account data: your name, email address and, for paid plans, billing details.
  • Clinic data you enter: patients, appointments, treatment plans, payments and reminders. This can include personal and health-related data about your patients.
  • Usage data: basic technical logs needed to run and secure the service.

How we use it

To provide and secure the service, process payments, respond to support requests, and improve Clinaia. We do not sell your data, and we do not use patient records for advertising.

Legal basis

We process account data to perform our contract with you and for our legitimate interest in running the service. Patient data is processed on your instructions as controller; you are responsible for the lawful basis to collect and store it.

Security

Your data is encrypted in transit and at rest, access is restricted, and we work with reputable cloud infrastructure providers. No system is perfectly secure, but we take protecting healthcare data seriously.

Sub-processors

We rely on a small set of trusted providers to run Clinaia, such as our hosting and database provider and, for paid plans, our payment processor. They are bound to protect your data and process it only to provide their service to us.

Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. In practice with Clinaia you can:

  • Access and edit your data directly in the app.
  • Export your full dataset at any time.
  • Delete your account and records.
  • Contact us to exercise any right or to raise a concern.

You also have the right to lodge a complaint with your local data protection authority.

Data retention

We keep your data for as long as your account is active. After you delete your account, we remove your data within a reasonable period, except where we must keep limited records to meet legal obligations.

Cookies

We use only essential cookies needed to keep you signed in and to run the demo. We do not use third-party advertising or tracking cookies.

Contact

For any privacy question or request, email mirza@clinaia.com and we will help.