Privacy Policy
Privacy Policy
Privacy Policy for Clinicia Randevu
Last Updated: July 29, 2026
Effective Date: July 29, 2026
1. Introduction
Welcome to Clinicia Randevu ("App", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Clinicia Randevu on iOS and Android.
We are committed to protecting your privacy and ensuring the security of all personal and health-related information processed through our application. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.
Clinicia Randevu is intended for authorized clinic staff using the Clinicia healthcare management system. It is not a consumer or patient-facing application.
2. Information We Collect
2.1 Personal Information
We collect information that you provide directly to us, including:
Account Information:
- Email address
- Password (transmitted securely; never stored in plain text on the device)
- User ID
- Clinic ID
- User profile details associated with your Clinicia account
Professional Information:
- Clinic name and details
- Doctor information (names, specializations, schedules)
2.2 Patient Information (Healthcare Data)
As a healthcare management application, we process the following patient data on behalf of healthcare providers:
Identity Information:
- Turkish Citizen Identity Number (T.C. Kimlik No)
- Foreign National Identity Numbers
- Passport Numbers
- First name and last name
- Date of birth
- Gender
Contact Information:
- Phone numbers
- Address information
- Country and nationality
Medical and Operational Information:
- Appointment details, history, status, and types
- Treatment notes
- Medical protocols and protocol change logs
- Protocol payments and debt-related records
- Laboratory test information (where enabled for your clinic)
- Doctor agenda and summary data
- Doctor progress payment information (where enabled for your role)
Patient data is controlled by the healthcare provider (clinic). We process it to provide clinic staff with the tools needed to operate within the Clinicia system.
2.3 Automatically Collected Information
- Device Information: Device type, operating system (iOS or Android) and version
- Usage Data: App usage patterns and features accessed, used to improve reliability and user experience
- Authentication Tokens: Access tokens, refresh tokens, and related session cookies, stored securely on the device
- Crash and diagnostic information needed to fix technical issues (where provided by the platform)
3. How We Use Your Information
We use the information we collect for the following purposes:
Core Application Services:
- Managing clinic appointments and schedules
- Patient record management and search
- Doctor schedule, agenda, and availability management
- Treatment protocol tracking and related payment workflows
- Laboratory and clinic operational features available to authorized staff
Account Management:
- User authentication and session management
- Account security and verification
- Secure token refresh and automatic logout when a session expires
Application Improvement:
- Analyzing usage patterns to improve user experience
- Debugging and fixing technical issues
- Developing new features and services
4. Data Storage and Security
4.1 Secure Storage
- On iOS, authentication credentials and tokens are stored using the iOS Keychain
- On Android, authentication credentials, tokens, and related session data are stored using EncryptedSharedPreferences protected by the Android Keystore
- Session cookies used for authentication refresh are stored securely on the device
- All data transmission uses HTTPS/TLS encryption
- Access tokens and refresh tokens are managed with expiration controls
4.2 Security Measures
- Secure session management with automatic token refresh
- Automatic logout on session expiration or when secure storage cannot be recovered
- Encrypted data transmission for all API communications
- Role-based access within the Clinicia system so staff only see data permitted for their account
4.3 Data Retention
- User account data is retained as long as the account is active
- Patient and clinical data is retained according to healthcare regulations and the clinic’s Clinicia system requirements
- Upon account deletion or a verified deletion request, personal account data under our control is removed within 30 days, subject to legal retention obligations
- Local tokens and session data on the device are cleared on logout or when the app resets corrupted secure storage
5. Data Sharing and Disclosure
5.1 We Do Not Sell Your Data
We do not sell, trade, or rent your personal information to third parties.
5.2 Service Providers
We may share information with trusted third-party service providers who assist us in:
- Hosting and maintaining our backend infrastructure
- Providing customer support services
These providers process data only on our instructions and for the purposes described in this policy.
5.3 Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal obligations
- Protect and defend our rights and property
- Prevent fraud or illegal activities
- Protect the safety of our users
5.4 Clinic Control
Patient and clinic operational data remains under the control of the healthcare provider. Clinic administrators manage staff access through the Clinicia system.
6. Your Rights
6.1 Access and Control
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format, where applicable
6.2 Healthcare Data Rights
- Healthcare providers control patient data access
- Patients may request access to their data through their healthcare provider
- Data is processed in compliance with applicable healthcare and data protection regulations
6.3 Exercising Your Rights
To exercise any of these rights, please contact us at:
Email: privacy@clinicia.com
7. Children's Privacy
Our application is designed for healthcare professionals and is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
9. Platforms
Clinicia Randevu is available on iOS and Android. This Privacy Policy applies to both platforms. Platform-specific secure storage mechanisms differ as described in Section 4, but the purposes of processing and your rights remain the same.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the application or on our website
- Updating the "Last Updated" date
- Sending a notification through the app for significant changes
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Clinicia Healthcare Technologies
Email: privacy@clinicia.com
Website: https://clinicia.com
Support: support@clinicia.com
12. Consent
By using Clinicia Randevu, you consent to our Privacy Policy and agree to its terms.
This Privacy Policy is compliant with Turkish data protection regulations (KVKK - Kişisel Verilerin Korunması Kanunu) and international standards including GDPR.