The short version
We collect the minimum needed to run the tool for verified doctors. We never want patient-identifying data, we don't sell anything, and you can delete your account and logs at any time.
01 What we collect
| Data | Why |
|---|---|
| Email address | Account creation and sign-in |
| Password (hashed) | Authentication, stored by Supabase Auth |
| NMC / SMC registration number | Verifying licensed-physician status |
| Licensed-physician attestation | Eligibility record |
| Query & response text | Delivering and improving the service |
| IP address & user agent | Security, abuse monitoring, diagnostics |
02 How we use your data
- Operate the service you request;
- Improve quality — reviewing cases where output was incorrect, incomplete, or unsafe;
- Aggregate analytics — counts and patterns, never individual physician tracking;
- Abuse detection — identifying non-clinical or guardrail-bypassing use.
We do not sell, rent, or share your data with third parties for their own commercial use.
03 No patient-identifiable information
You are instructed never to enter patient names, MRNs, contact details, or any identifiers. Logs are intended to contain only de-identified clinical descriptions.
04 Third-party processors
| Processor | Role |
|---|---|
| Supabase | Database & authentication hosting (Mumbai, India) |
| OpenAI | Processes query text via API to generate responses; does not train on API data per their published policy |
| Vercel | Application hosting & request diagnostics (nearest edge region) |
| Tally | Intake form for access requests (European Union) |
Each acts as a processor under our instructions.
05 Cross-border processing
When generating a response, your query text is processed through OpenAI's US infrastructure. By using the service you acknowledge this cross-border transfer. No physician data is retained by our processors beyond their stated service-operation windows.
06 Retention
Account data is retained for the lifetime of your account, and for 180 days following deletion. Query and response logs are retained for 90 days, after which they are permanently deleted or aggregated into non-personal analytics. Attestation and acceptance records are retained for the lifetime of the account and 3 years after deletion. You can request deletion of your account at any time.
07 Your rights under the DPDP Act
You may access, correct, or delete your personal data, and withdraw consent. Manage most of this from your profile, or contact our grievance officer below.
08 Data fiduciary & grievance officer
Data fiduciary: Ankit Agarwal, operating as CliniKnow. Upon incorporation, the Data Fiduciary will be the incorporated entity and this page will be updated. For any privacy request or grievance, contact our Grievance Officer at ankit@cliniknow.com. We will acknowledge within 48 hours and aim to resolve within 30 days.