Privacy Policy

Last updated: June 2026  ·  Effective date: June 2026

1. Who We Are

Clinix is a private clinic management platform that helps healthcare providers track patients, manage follow-ups, and improve retention. We operate globally and serve clinics across multiple countries including the United Kingdom, Pakistan, and the United Arab Emirates.

For the purposes of this policy, "Clinix" refers to the platform operator. If you have questions about this policy, contact us at helloclinixtech@gmail.com.

2. What Data We Collect

Data you provide directly

• Clinic registration details (clinic name, specialty, contact information)
• User account information (name, email address, password)
• Patient records entered into the platform (names, contact details, appointment history, clinical notes)
• Payment information (processed securely via third-party payment providers — we do not store card details)

Data we collect automatically

• Login timestamps and session activity
• Device type, browser, and IP address
• Usage patterns within the platform (pages visited, features used)
• Error logs and performance data

3. How We Use Your Data

We use the data we collect to:

• Provide, operate, and improve the Clinix platform
• Authenticate users and maintain account security
• Send service notifications, product updates, and support communications
• Generate aggregated, anonymised analytics to improve the product
• Comply with applicable legal obligations

We do not sell your data. We do not use patient data for marketing purposes. We do not share your data with third parties except as described in Section 5.

4. Patient Data — Special Considerations

Clinix is used by healthcare providers to store patient information. We treat this data with the highest level of care.

• Clinic responsibility: The clinic (not Clinix) is the data controller for patient records. Clinix acts as a data processor on behalf of the clinic.
• Access controls: Patient data is isolated per clinic using row-level security. Staff at one clinic cannot access patient data from another.
• No secondary use: We never use patient data for purposes other than providing the service to the clinic that entered it.
• Clinic obligations: Clinics using our platform are responsible for ensuring they have appropriate consent from patients to store and process their data.

5. Who We Share Data With

We share data only with trusted service providers necessary to operate the platform:

• Supabase — database hosting and authentication infrastructure
• Netlify — website and application hosting
• Payment processors — for handling subscription billing (e.g. Stripe)
• Email service providers — for sending transactional emails

All third-party providers are contractually obligated to handle data securely and only for the purposes we specify. We do not sell, rent, or trade your data with any other parties.

6. Data Storage and Security

Your data is stored on secure cloud infrastructure provided by Supabase. We implement the following security measures:

• Encryption in transit (HTTPS/TLS) for all data moving between your browser and our servers
• Encryption at rest for all stored data
• Row-level security policies ensuring clinics can only access their own data
• Access controls limiting which team members can access production data
• Regular security reviews and updates

No system is completely immune to security risks. In the event of a data breach that affects your data, we will notify you as required by applicable law.

7. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate data be corrected
• Deletion — request that your data be deleted (subject to legal retention requirements)
• Portability — request your data in a machine-readable format
• Objection — object to certain types of processing
• Restriction — request that we restrict processing of your data

To exercise any of these rights, contact us at helloclinixtech@gmail.com. We will respond within 30 days.

8. UK and International Users

If you are based in the United Kingdom, your data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you are based outside the UK, we still apply equivalent data protection standards regardless of local requirements. We are committed to protecting your data to a high standard irrespective of jurisdiction.

Where data is transferred internationally, we ensure appropriate safeguards are in place.

9. Data Retention

We retain your data for as long as your account is active. If you close your account:

• Your account data is deleted within 30 days of account closure
• Patient records are deleted within 30 days unless you request an export first
• Billing and transaction records may be retained for up to 7 years for legal and accounting purposes
• Anonymised, aggregated data may be retained indefinitely

10. Cookies

We use cookies and similar technologies to:

• Keep you logged in between sessions
• Remember your preferences
• Understand how the platform is being used

You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

11. Children's Data

Clinix is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

Note: patient records for minor patients may be entered by clinics as part of their legitimate healthcare operations. Clinics are responsible for ensuring they have appropriate consent for storing such records.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify active users by email of any material changes. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us:

• Email: helloclinixtech@gmail.com