My Clinic – Privacy Policy
Effective 8 October 2026
My Clinic is a companion app for clinics that use the Clinic Management System.
Patients use it to see their appointments, queue, results and prescriptions.
Doctors use a separate sign-in inside the same app to look up their own
patients. This page explains what the app handles and why.
Who is responsible for your information
Your medical record belongs to the clinic that treats you. That clinic decides
what is kept and for how long, and is the place to ask about your record. The
system is hosted for the clinic and handles your information only to run the
app on its behalf.
What the app handles
- Your account: your name, your phone number (used to sign you in
with a one-time code, sent by SMS or WhatsApp), your chosen language and, when
you register with a clinic, your date of birth, gender and (if you give it)
national ID number.
- Health information from your clinic: appointments, visits,
diagnoses, prescriptions, laboratory and imaging results, vitals,
vaccinations, referrals and invoices. Clinic staff create it; the app
shows it to you.
- Messages you send to your clinic through the app, and its replies.
They are kept by that clinic with your record, are only visible to you and its staff,
and you can report a conversation from inside it.
- A profile picture, only if you choose one.
- A notification identifier for your phone, so the clinic can tell
you when a result is ready or you are called in. It is delivered through
Apple's and Google's notification services and Firebase Cloud Messaging.
- Your approximate location, only if you allow it, to put the nearest
clinics first. It is used at that moment to sort the list and is not stored.
- Camera and photos, only when you use them: to take or choose a
profile picture, or (clinic staff) to scan a patient's barcode.
- Face ID or Touch ID (clinic staff): checked by your phone to
unlock the app. We never receive your biometric data.
What we do not do
- No advertising, and no tracking of you across other apps or websites.
- We do not sell your information.
- The app contains no analytics or advertising software.
Who can see it
- You, and people you have linked to your account as family members.
- Staff of your clinic, according to their role. Clinics are kept
completely separate from one another: staff at one clinic cannot see
another clinic's patients.
- Service providers that run the system for the clinic: web hosting,
the database, the service that delivers sign-in codes, and notification
delivery. They process information only to provide those services.
Notifications can appear on your lock screen. You can switch previews off in
your phone's settings.
Keeping it safe
Everything between the app and the server is encrypted in transit. Sign-in
tokens are kept in your phone's secure storage. Sign-in codes expire quickly,
and the staff app can require Face ID or Touch ID again after it has been in
the background.
Your choices
- Delete your app account at any time: open the app, go to
Profile, then Delete my account. This closes your app account,
stops notifications and signs you out on every phone. Your clinic is required
to keep your medical record, so deleting the account does not erase it.
- To see, correct or ask about your medical record, contact your clinic.
- You can turn off notifications, location, camera and photo access at any time in
your phone's settings; the app keeps working without them.
Children
A parent or guardian can manage a child's records from their own account using
the family feature. The app does not create separate accounts for young children.
Changes to this policy
If the app starts handling information in a new way, this page is updated first and
the effective date above changes.
Contact
For anything about your medical record, contact your clinic directly.