Privacy Notice

Klineck is an Egypt-based clinic management software product. Contact our privacy team at [email protected].

Klineck is the product name used by its Cairo-based operator and is not represented as an incorporated limited-liability company.

Clinics control the patient and clinical information they enter into Klineck. Klineck processes it on their instructions, while separately controlling account, security, support, website, public-booking, and product-administration data.

We process clinic and staff identity, contact, role, authentication, passkey, two-factor, session, device, and activity information.

At a clinic's direction, we process patient identity and contact details, appointments, visit reasons, medical history, allergies, medications, diagnoses, prescriptions, lab files and results, insurance, invoices, payments, uploaded files, communications, audit records, and integration data.

Website and booking visitors may provide names, email addresses, phone numbers, clinic details, messages, appointment choices, visit reasons, verification codes, and guardian confirmations. Technical records may include IP address, browser, device, security events, and the necessary language cookie.

We use information to provide and secure the private beta, authenticate users, support clinic workflows, create and manage bookings, deliver communications, operate integrations, troubleshoot, prevent misuse, comply with law, establish or defend legal claims, and improve reliability.

Lawful bases may include contract, legal obligation, legitimate interest, legal claims, and consent. Sensitive health and children's information require the additional permissions required by Egyptian law.

Klineck may send limited information to approved AI-provider categories for de-identified medication summaries and lab-result structuring. We configure or contract those providers not to train models on customer or patient content.

AI output is assistive and must be reviewed by an authorized qualified clinician. Klineck does not use patient health information for advertising or marketing.

Authenticated clinic users may optionally connect a Google account to create and manage Google Calendar appointment events containing Google Meet conferencing links. Google OAuth authorizes only this integration and is not used to sign in to Klineck.

Depending on the permissions granted and features used, Klineck may process OAuth access and refresh tokens; the connected Google account identifier or email address; Calendar event identifiers; appointment event titles, dates, times, descriptions, attendees, status, and time zone; Meet links and conference metadata; and synchronization, connection, and error-status information.

Klineck uses this data only to create appointment events, add Meet conferencing, update events when appointments change, cancel or delete Klineck-created events, display connection and synchronization status, and diagnose integration errors. We do not access unrelated Calendar events or other Google services unless separately disclosed and authorized.

Google user data is not used for advertising, profiling, credit decisions, or purposes unrelated to providing or improving these integration features.

Klineck may retain encrypted OAuth credentials, connected-account identifiers, event identifiers, Meet links, and synchronization metadata while the integration is connected or as otherwise needed to provide the requested service. We protect this information with access controls, encryption-supported storage and transport, role-based permissions, monitoring, and reasonable technical and organizational safeguards.

Klineck does not sell Google user data or transfer it to advertisers or data brokers. Infrastructure, database, hosting, security, monitoring, and support providers may process it only as needed to operate, secure, or support the integration, on our instructions and for the applicable service purposes.

Klineck's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Calendar and Google Meet user data is used solely to provide the Google integration features requested by the user, including creating and managing Google Calendar events, generating Google Meet conferencing links, synchronizing appointment changes, and displaying integration status.

Google Workspace API data, including raw, aggregated, anonymized, or derived data, is not used to develop, improve, fine-tune, or train generalized or foundational artificial intelligence or machine-learning models.

Klineck does not transfer Google Workspace API data to third-party artificial intelligence or machine-learning providers except where strictly necessary to provide the Google Workspace functionality explicitly requested by the user. Such data is never shared for model training, model improvement, advertising, profiling, or any other secondary purpose.

Any AI-assisted features provided by Klineck operate independently from the Google Workspace integration. Google Workspace API data is not used by those AI features unless explicitly required to perform the user-requested Google Workspace functionality.

Authorized clinic users may disconnect Google in the integration settings. Klineck then revokes or deletes stored OAuth credentials and stops accessing the connected account. Disconnecting does not necessarily delete events already created in Google Calendar; users may delete them in Google Calendar or through Klineck where that functionality remains available.

Associated account identifiers, event identifiers, Meet links, and synchronization metadata are deleted or anonymized when no longer needed, subject to legal, security, fraud-prevention, dispute, and limited backup-retention requirements. Request deletion of Google integration data at [email protected].

Information may be shared with infrastructure, database, object-storage, security, error-monitoring, queue, communications, AI, and support-provider categories. Optional clinic-enabled integrations may receive information needed for video meetings, messaging, or drug search.

Some providers process information in the United States or European Economic Area. We use the contractual, technical, organizational, consent, and authorization measures required for transfers from Egypt.

Clinic-controlled information is kept while the clinic account is active and as needed for clinic instructions, legal duties, disputes, security, fraud prevention, and limited backup cycles. Clinics determine medical-record retention subject to applicable law.

We delete or anonymize information when no longer needed unless law requires or permits retention. Patient or booking requests may need to be coordinated with the clinic controlling the record.

We use access controls, authentication safeguards, audit records, encryption-supported services, backups, monitoring, and role-based permissions. No online service can guarantee absolute security.

A parent or legal guardian may book or authorize processing for a minor. Children may not create clinic staff accounts.

Subject to Egyptian law, you may request access, correction, deletion, restriction, portability or a copy, object, withdraw consent, and complain. Contact [email protected] or Egypt's Personal Data Protection Center.

Klineck uses the necessary klineck_locale cookie to remember English or Arabic. Authentication and security services may use other necessary cookies. We do not sell personal information or serve third-party targeted advertising.

We may update this notice as the beta, providers, or law changes. Material changes receive a new version date and renewed notice or consent where required.