ClinTic Privacy Policy

1. Introduction

Welcome to ClinTic, a digital health management application developed and operated by Clarigate Pty Ltd ("Clarigate", "we", "our", or "us"). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal and health information when you use ClinTic.

2. Information We Collect

Personal Information

Name, email, encrypted password, date of birth, gender, phone number, address, emergency contacts, profile photo (optional).

Health Information

Medical history, allergies, chronic conditions, medications, vaccinations, blood type, vital signs, blood pressure, glucose, heart rate, oxygen saturation, weight, height, BMI, laboratory reports, radiology reports, referrals, prescriptions, notes, and uploaded medical documents.

Device Information

Device model, operating system, app version, IP address, device identifiers, language, crash reports and diagnostic logs.

Usage Information

Login history, feature usage, session duration, preferences and security events.

3. Permissions

ClinTic may request access to the Camera, Photo Library, Files & Documents, Notifications, Apple Health, Google Health Connect, Fitbit, Bluetooth (where applicable), and Location Services (optional). Users may revoke permissions at any time through their device settings.

4. Health Platform Integrations

With your explicit consent, ClinTic may import or synchronise information from Apple Health, Google Health Connect, Fitbit and other supported wearable platforms. ClinTic only accesses information you authorise and does not modify data stored in these services.

5. How We Use Your Information

To create your account, authenticate your identity, provide health tracking services, display health trends, synchronise devices, secure your account, process subscriptions via Stripe, improve the application, respond to support requests, detect fraud and comply with legal obligations.

6. Payment Processing

Subscription payments are processed securely through Stripe. Clarigate does not store your complete payment card information.

7. AI-Powered Features

Our application provides optional AI-powered features designed to help users organize, summarize, and better understand their health information.

We use Azure OpenAI, a service provided by Microsoft, to provide certain AI-powered functionality within the application.

AI processing is optional. Before personal or health-related information is sent for AI processing, we obtain the user's explicit consent through an "Accept & Enable AI Features" action.

8. Information Processed by AI

When you enable and use an AI-powered feature, information necessary to provide the requested functionality may be processed through our backend services and Azure OpenAI.

Depending on the feature used, the information processed may include:

• Health vitals and measurements;
• Medication information;
• Medical history;
• Allergies;
• Immunization information;
• Medical documents and information contained within uploaded documents; and
• Other health-related information that you have provided to the application and that is necessary to generate the requested AI output.

We only send information that is reasonably necessary to provide the particular AI-powered feature requested by you.

9. How AI Processing Works

When you use an AI-powered feature after providing the required consent:

• The relevant information is securely transmitted from the application to our backend services.
• Our backend prepares the information required for the requested AI operation.
• The applicable information is transmitted to Azure OpenAI for AI processing.
• Azure OpenAI processes the information to generate the requested output.
• The generated output is returned to our backend.
• Where applicable, the generated AI summary is stored in our database so that you can access it later within the application.

10. Azure OpenAI

We use Azure OpenAI, provided through Microsoft Azure, as a third-party service provider for certain AI-powered features.

Azure OpenAI processes the information submitted to it solely for the purpose of providing the AI functionality requested by the user.

Based on our current Azure OpenAI configuration and applicable service terms, data submitted to Azure OpenAI is not used by Azure OpenAI to train or improve Microsoft's or OpenAI's foundation models and is not retained by the Azure OpenAI service for subsequent use.

The generated AI summaries may, however, be stored by our application in our own database as described above.

11. Explicit Consent

We obtain explicit user consent before sending applicable personal or health-related information to Azure OpenAI for optional AI-powered features.

Before enabling AI features, users are informed that their information may be processed using Azure OpenAI and are provided with an "Accept & Enable AI Features" option.

If the user does not provide consent, the applicable AI-powered functionality will not send the user's personal or health-related information to Azure OpenAI.

Users may choose not to enable or use optional AI-powered features.

12. Storage of AI-Generated Content

AI-generated summaries may be stored in our database to allow users to access previously generated summaries and related information within the application.

The storage of these summaries is subject to the application's general data retention, security, account deletion, and data management practices described elsewhere in this Privacy Policy.

The fact that Azure OpenAI does not retain submitted data does not mean that our application does not retain information. AI-generated summaries and other information may remain stored within our systems according to our applicable retention policies until they are deleted by the user or otherwise removed in accordance with our data retention practices.

13. Health Information and AI

Because the AI features may process sensitive health-related information, including vitals, medications, medical history, allergies, immunizations, and medical documents, we take measures designed to protect this information during transmission and processing.

Health information is processed only for the purposes described in this Privacy Policy and to provide the functionality requested by the user.

We do not use health information obtained through the application for advertising or targeted marketing purposes.

14. AI-Generated Information Disclaimer

AI-generated summaries, explanations, interpretations, and other outputs are provided for informational and health-management purposes only.

AI-generated information may contain errors, omissions, or inaccuracies and should not be considered a diagnosis or a substitute for professional medical advice, diagnosis, or treatment.

Users should consult an appropriately qualified healthcare professional for medical decisions or concerns.

Where appropriate, the application may provide references or links to sources supporting medical or health-related information.

15. Withdrawal of AI Consent

Users may choose not to use optional AI-powered features.

Where the application provides an option to disable AI features, users may withdraw their consent through the applicable application settings.

Withdrawal of consent does not affect AI processing that occurred before consent was withdrawn. Previously generated summaries that have already been stored in our database may remain available until deleted in accordance with the application's data retention and deletion procedures.

16. Data Security

We use appropriate technical and organizational measures designed to protect personal and health-related information against unauthorized access, disclosure, alteration, or destruction.

Information transmitted between the application, our backend services, and third-party service providers is protected using appropriate security measures, including encryption in transit where applicable.

Access to health-related information and AI-generated content is restricted to authorized systems and personnel as necessary to operate and maintain the application.

17. International Data Transfers

Your information may be processed or stored in Australia or other countries where Clarigate or trusted service providers operate, using appropriate safeguards.

18. Your Rights

You may request access, correction, deletion, data export, or withdraw consent, subject to applicable laws.

19. Data Retention

Information is retained only as long as necessary to provide services, meet legal obligations and resolve disputes, after which it is securely deleted or anonymised where practicable.

20. Children's Privacy

ClinTic is not intended for children without appropriate parental or guardian consent where required by law.

21. Third-Party Service Providers

In addition to Azure OpenAI, we may use other third-party service providers to operate, maintain, secure, or provide functionality for the application, such as Stripe, Apple Health, Google Health Connect and Fitbit. These services have their own privacy policies.

Where third-party service providers process personal information on our behalf, they are authorized to process such information only for the purposes necessary to provide the applicable services and subject to appropriate contractual and security requirements.

22. Limitation of Liability

ClinTic is a personal health management tool and is not a medical device. It does not provide medical advice, diagnosis or treatment. Users should consult qualified healthcare professionals. Clarigate's liability is limited to the maximum extent permitted by applicable law.

23. User Responsibilities

Users are responsible for maintaining secure login credentials, providing accurate information and using ClinTic lawfully.

24. Changes to this Policy

Clarigate may update this Privacy Policy from time to time and will notify users of material changes where required.

25. Contact Us