HClinic — Privacy Policy

Effective date: 22 June 2026  ·  Provider: ahmedmhelal  ·  Contact: [email protected]

1. About HClinic

HClinic is a clinic-management client application for authenticated clinic staff (for example doctors, reception/secretary, and administrators). It is not a consumer health or self-diagnosis app, and it does not provide medical advice. It is a tool used by clinic staff to manage patients, appointments, medical records, billing, and internal communication.

2. How HClinic works and who controls your data

HClinic does not run a central database of patient information. Each clinic operates its own server, which the app connects to using a Base URL selected the first time the app is launched. The clinic is the controller of the patient and medical data it stores; HClinic (the developer) provides the software that displays and edits that data on the clinic's behalf. Data you enter or view is transmitted to and stored on your clinic's own server, not on servers operated by the developer.

3. Data we process and why

The data below is transmitted between the device and your clinic's server to make the app work. We do not sell your data, we do not use it for advertising, and we do not share it with third parties for their own purposes.

Data	Why it is processed
Account username and password	To sign you in. The password is used only for authentication and is never stored on the device; only short-lived access/refresh tokens are kept in the device's secure keystore.
Patient personal details (name, phone, email)	Core clinic functions: registration, booking, and contacting patients.
Health and medical data (diagnoses, prescriptions, examinations, clinical notes, history)	To display and maintain the patient's medical record for the treating staff.
Billing / payment records (amounts, balances)	To record and display clinic payments. HClinic does not collect credit-card or payment-instrument data and has no in-app purchases.
Photos and documents you capture or attach	To attach images and files (e.g., scans, reports) to the patient record. Uploaded to the clinic server when added.
Voice notes (audio recordings)	Optional voice notes on board cards and chat, uploaded to the clinic server.
In-app messages (staff chat, board notes)	Internal communication between clinic staff.
Approximate (coarse) location	Optional. Used only to show local weather in the dashboard widget. Precise location is never requested. The feature works without it (a default location is used).
Push notification token (device identifier)	To deliver appointment, message, and payment notifications. Stored per user/device on the clinic server and revoked when you log out.

4. Permissions

• Camera — to capture patient/clinical photos. Requested only when you choose to take a photo.
• Photos / media — to attach existing images and save body-map images. Uses the Android photo picker where possible; no broad "all files" access is requested.
• Microphone — to record optional voice notes.
• Notifications — to alert you to appointments, messages, and payments. No medical details are included in notification text.
• Approximate location — optional, for the weather widget only (see §3).
• Biometric / fingerprint — optional app lock that protects access to the locally stored login token. No biometric data leaves the device.

5. Sharing and third parties

We do not share your data with third parties for advertising or analytics. HClinic contains no advertising, analytics, or tracking SDKs. Data is sent only to your clinic's server. To provide the optional weather widget, your clinic's server may query a weather data provider using approximate coordinates; no patient or account data is sent for that purpose.

6. Security

• Network traffic to your clinic uses HTTPS encryption in transit for non-local hosts.
• Login tokens are stored in the device's secure keystore/keychain (Android Keystore). Raw passwords are never stored.
• An optional biometric lock protects the stored token.
• Access to data is governed by your clinic's role-based access controls, enforced on the clinic server.

7. Data retention and deletion

Logging out revokes your session tokens on the clinic server. Patient and medical records are retained and managed by your clinic according to its own policies and applicable law; requests to access, correct, or delete that data should be directed to your clinic administrator. You may also contact us at [email protected] for help with an account-data or deletion request.

8. Children

HClinic is intended for use by clinic staff and is not directed to children. It is not designed for or marketed to anyone under 18.

9. Your rights and contact

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data. Because each clinic controls its own data, please contact your clinic administrator first; for questions about the app itself, contact [email protected].

10. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by a new effective date at the top of this page.

---