Privacy Policy

Account data: name, email, phone, clinic name, role (admin, doctor, receptionist).

Clinical data (controlled by the clinic): patient demographics, visit notes, prescriptions, bills, fees. Clinics are the controller of this data; ClinicToday is the processor.

Usage data: device type, browser, IP address, timestamps, and error logs used to keep the Service reliable.

• To provide, secure and improve the Service.
• To authenticate users and enforce role-based access.
• To send transactional messages (invites, password resets, receipts).
• To respond to support requests.

We do not sell your data or your patients' data. We do not use clinical data for advertising.

We share data only with vetted subprocessors required to run the Service:

• Cloud hosting and database (managed database provider).
• Email delivery for transactional messages.
• Error monitoring and analytics (aggregated, no clinical fields).

We do not share personal or clinical data with third parties for their own marketing purposes.

Clinical records are retained for as long as your clinic account is active. You can request export or deletion of your clinic's data by writing to us. On account closure, data is deleted from active systems within 30 days and from backups within 90 days.

Data is transmitted over TLS 1.2+ and stored encrypted at rest. Access is enforced by row-level security and role permissions so that one clinic cannot see another clinic's data. Detailed controls are documented on our Security page.

You may request access, correction, export or deletion of your account data at any time by emailing hello@logicnex.in. For patient data, the request should come from the clinic that owns the record.

ClinicToday is a professional tool used by licensed clinics. Patient records may include minors, entered and managed by the treating clinic under Indian law.

We may update this policy from time to time. Material changes will be notified in-app or by email at least 14 days before taking effect.