Privacy Policy

1. Data Controller

Klinio is operated by ULTIBAITS SPORTİF BALIKÇILIK İTHALAT İHRACAT LİMİTED ŞİRKETİ.

• Tax No (VKN): 8871296888
• MERSİS No: 0887129688800001
• Address: Günlükbaşı Akarca Mah. 853 Sok. No:50A Fethiye/Muğla, Turkey
• Contact: info@klinio.net

For patient data entered into Klinio by a clinic, the subscribing clinic acts as the data controller and Klinio acts as the data processor under the terms of our Data Processing Agreement.

2. Local-First by Default

Klinio is a local-first platform. By default, clinic and patient data is stored in a local database on the clinic's own workstation. Data leaves the device only when the clinic explicitly enables optional cloud sync or cloud backup.

3. Optional Cloud Sync

When a clinic enables cloud sync, data is transmitted over encrypted channels and stored with row-level isolation between accounts. Cloud sync is opt-in and can be disabled at any time. See our Security overview for technical detail.

4. Information We Process

• Account Data: Name, clinic name, contact email, country, and license details, used to manage your account and subscription.
• Clinical Data: Information entered by the clinician. This stays local-first and is only synced when cloud sync is enabled.
• Technical Data: Minimal, aggregated technical signals used to maintain and improve the product.

5. AI Data Minimization

AI-assisted drafting features are designed to minimize data sent to AI providers. Direct patient identifiers (such as names, national ID numbers, and exact addresses) are filtered before any prompt is processed. AI prompts and outputs are not used to train third-party public models. AI outputs are drafts only and require clinician review.

6. No Data Selling

We do not sell, rent, or trade personal or clinical data to third parties. We do not use clinical data for advertising or profiling.

7. Your Rights

You may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us at info@klinio.net. Because Klinio is local-first, clinic administrators also retain direct tools to export and delete records on their own workstations.

8. Retention & Deletion

Account data is retained for the life of the subscription. When cloud sync is used and an account is closed, synced data is deleted from our cloud storage within 30 days of the request. Local data remains under the clinic's own control.

9. Updates to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated to account holders.