Privacy Policy

This notice describes how the clinic application handles account and patient information. It is an operational description, not a legal certification or a substitute for the clinic's own privacy notice.

Patient records, consultations, prescriptions, and billing entries are stored for clinic operations and are available only to signed-in users with a role that permits that access.

Account records include the name, email, optional username, contact number, password hash, role, and status of a registration request. Passwords are stored only as hashes.

Audit logs record sign-ins, record changes, registration decisions, and support impersonation sessions. Those logs are for clinic accountability and are not edited from ordinary screens.

Sign-in and impersonation records may include an IP address and browser user agent. The clinic should retain those details only as its own policy allows.

Questions about a person's information should go to the clinic administrator through the contact page.