Privacy Policy

1.The short version

• You sign in with a phone number or an email address and a one-time code — there is no password.
• Your medication list, dose history, health details and AI conversations are saved on your phone (and in your phone's own backup, if that is on).
• While you're signed in, the app also sends our server your doses from the past day and the next two days, and whether you took or missed them, so that caregiver alerts can work. Our server keeps the records of past doses until your account is deleted.
• Questions you ask the AI assistant are sent to an AI provider to get an answer. We don't keep the text of your questions or answers on our servers, unless you report an answer to us.
• Photos are read on our server to answer you and then deleted — they are never stored there.
• No ads, no tracking or analytics tools, and we never sell your data.
• You can delete your account at any time, in the app or from our website.

2.Information we collect

Depending on which features you use, we collect:

• Account details: the phone number or email address you sign in with, and a second one if you add and confirm it in the app; the name you enter (the app asks for your first, father's and grandfather's names); your username and earlier usernames; your city, if our team adds it to your account (the app doesn't ask for it); the app's language and the Kurdish dialect for AI answers; your account's status (for example, if our team suspends it, and why); and dates such as when you joined, confirmed your phone or email, and were last active. Removing a second phone number or email in the app removes it from your phone only — email us to remove it from our server.
• Health details and profile photo: if you choose to add them, your weight, height and blood group, and a profile photo. They stay on your phone; the app never sends them to us.
• One-time codes: when you sign in, add or change a phone number or email, or confirm deleting your account, we send a one-time code. We keep only a scrambled (hashed) form of the code, never the code itself, with where and how it was sent (WhatsApp, SMS or email), the IP address that asked for it, when it was sent and used, and how many attempts were made.
• Sign-in sessions: a session token, kept in your phone's secure storage so you stay signed in. Our server keeps only a hashed copy of it, with when it was created, last used and expires.
• Medications and doses: your medication list, schedule and reminders, and the last six months of your dose history, are kept on your phone. While you're signed in, the app also sends our server your doses from the past day to two days ahead (medicine name, dose, time, and your reminder and caregiver-alert settings), the time you mark a dose as taken, and which doses were missed. It does this whether or not you have caregivers, so that alerts work as soon as you do. Our server keeps the doses whose time has passed, and whether they were taken or missed, until your account is deleted; removing, pausing or changing a medicine deletes its upcoming doses from our server, but not the earlier ones. Our team can see how many medicines an account has.
• Caregiver links: whom you invited or who invited you, the status of each link, and the alerts sent. Caregivers who accepted your invitation can see all your doses for today: medicine name, dose, time, and whether it was taken (and when) or missed.
• AI assistant: the questions you type, the medicine names you enter to compare, the earlier messages of the conversation (our server passes at most the last 12 to the AI provider), and photos you choose to send. They are passed to our AI provider to produce an answer (see Who we share data with). We don't store the text on our servers; your conversations are saved on your phone, where you can delete them. For each request we record usage data linked to your account: the feature, the AI model, its size in tokens, its cost, the time it took and whether it succeeded.
• Photos: photos of medicine boxes (to read and compare medicines) and photos you send in the chat. Before a photo leaves your phone, the app re-saves it without location, camera or time details (a chat photo in a format the app can't re-save is sent as your phone stored it). On our server a photo is kept only while the answer is produced, then deleted — it is never saved. Photos you send in the chat also stay on your phone with the conversation until you delete it.
• Reports: if you report an AI answer, we keep the question, the answer, your reason and comment, and the AI model used, so our team can review it.
• Plan and usage: your plan (No subscription, Basic or Premium), its start and end dates and, if it was cancelled, when and why; trial uses; extra credits or higher limits our team gives you, with our team's note about them; and your daily usage counts.
• Payments: for payments made directly to us (such as FIB or cash), the amount, currency, method, the transaction ID or receipt number, notes by our team and, if you send one, a picture of the receipt. For purchases through an app store, the store, product and transaction ID. We never receive your card details or bank login.
• Account history: our team's log of changes to your account. It records changes you make yourself, such as a new username (with the IP address it was sent from), and changes our team makes, such as a plan activated, extended or cancelled (with the payment amount, method and reference), credits or limits changed, or a suspension (with the reason). Each entry shows your name or username.
• Notifications: your phone's push token (from Firebase), its platform, the app version and when it was last seen; and the items in your in-app inbox (caregiver alerts, invitations and messages from our team).
• Support messages: what you send us by email, phone, WhatsApp or Instagram (including, when you pay us directly, your username and any receipt), and your contact details there.
• Technical data: our servers keep request logs (IP address, time, the address requested, the result, and the type of app or browser) and error logs, which can include your account ID, to keep the service working and secure.

We do not collect your location (the health-care directory works with the city you choose), your phone's contacts or files, advertising IDs, or data from other apps. The camera is used only when you choose to scan a code or photograph a medicine, and product barcodes are looked up on your phone.

3.How we use it

• To create your account, sign you in and keep it secure.
• To remind you of your doses (reminders are made on your phone) and, if you have caregivers, to alert them about missed doses.
• To answer your questions with the AI assistant, compare medicines, and apply your plan's daily limits.
• To activate and manage subscriptions and keep payment records.
• To send the notifications you'd expect: caregiver alerts, invitations, plan reminders and occasional messages from our team.
• To review reported AI answers and improve the assistant's safety and quality.
• To answer your support requests.
• To understand how Clinca is used and what it costs us — for example AI use and cost by plan, and payments — so we can run and plan the service.
• To prevent abuse, fix problems and keep our systems running.
• To meet our legal obligations.

We don't use your data for advertising, we don't build marketing profiles, and we don't sell personal data. We don't use your conversations to train AI models, and we choose AI providers that don't either.

Medicine and health information is sensitive. We process it only to run Clinca's features, with your consent when you enter it — for example, while you're signed in, your doses are sent to our server so that caregiver alerts can work. You can withdraw consent at any time by deleting the data in the app or deleting your account; doses already decided on our server are deleted only with your account.

4.Who we share data with

We share data only as described here: with the service providers that run parts of Clinca for us, with the people you choose, with a new owner if Clinca is sold, and with authorities when the law requires it. Our service providers may use the data only to provide their service to us; Google Play, Meta (WhatsApp and Instagram), First Iraqi Bank and OpenStreetMap handle what they receive under their own privacy policies.

• Contabo — hosts our server and database (api.clincaa.com), where the data described above is stored.
• OpenRouter and Google (Gemini models) — produce the AI assistant's answers and read medicine photos. Our server normally uses OpenRouter, where we only allow AI providers that keep no data and don't train on it. If we use Google's Gemini API directly, we use it only with a paid account, under which Google doesn't use the content to improve its products; Google may keep it for a limited time to detect abuse.
• Resend — delivers emails with one-time codes (your email address and the code).
• OTPIQ — delivers one-time codes by WhatsApp or SMS (your phone number and the code). WhatsApp messages are carried by WhatsApp (Meta).
• Firebase Cloud Messaging (Google) — delivers push notifications to phones. Google receives the phone's push token and each notification's content: for a caregiver alert, the name of the person who missed the dose and the medicine, dose and time; for an invitation or acceptance, the other person's name; for plan notices, the plan and its end date.
• Google ML Kit and Firebase in the app — Google's software inside the app reads barcodes and QR codes on your phone (the camera images stay on your phone) and receives push notifications. It may send Google technical information such as the phone model, the app version and how the component performed.
• Google (Android backup) — if backup is on in your phone's settings, Android copies Clinca's data on your phone to your Google account under Google's terms: your profile and health details, medicines, dose history, AI conversations and their photos, and your inbox. Your sign-in session is never included, and we can't read this backup.
• Vercel — hosts this website and our team's admin panel, so information our team looks at passes through it. It also processes visitors' IP addresses to deliver pages.
• Google Drive — stores our nightly backups. They are encrypted before they leave our server, so Google can't read them.
• Google Play — distributes the app and, if you subscribe in the app, handles that payment under Google's own privacy policy.
• Meta (WhatsApp and Instagram) — carries the messages you send us there, such as support questions, subscription requests and receipt pictures.
• First Iraqi Bank (FIB) — if you pay us by FIB, the bank handles the payment; we receive the amount and a reference.
• OpenStreetMap — draws the maps in the health-care directory. Your phone downloads map images directly from OpenStreetMap's servers, which see your IP address and which part of the map you are viewing. Pictures in Home banners and the directory normally come from our server; if one is linked from another website, your phone loads it from there.
• Other Clinca users — anyone signed in to Clinca who types your exact username can see the name on your account (the full name you entered), so that they can invite you as a caregiver. Caregivers who accepted your invitation see your doses for today and, while you have Basic or Premium, get alerts about doses you didn't take, showing your name and the medicine, dose and time. Alerts and invitations already sent stay in the other person's inbox, even after the link ends or you delete your account.
• Authorities — when the law requires it, or to protect someone's life or safety.
• A new owner — if Clinca is merged or sold, your data would move under this policy, and we would tell you first.

5.Where your data is processed

Clinca serves the Kurdistan Region of Iraq, but our server and most of our providers' servers are outside Iraq, including in the European Union and the United States. By using Clinca, you understand that your data is processed there. We choose providers with strong security and send each one only what it needs.

6.How long we keep it

7.Your rights and choices

You can:

• See and correct your name, username, phone number, email and language in the app. To see or correct anything else we hold, such as your city, email us.
• Get a copy of the personal data we hold about you.
• Delete conversations and medicines in the app, or your whole account (see below).
• Object to or restrict certain uses, or withdraw your consent, for example by not using a feature.
• Turn off notifications, camera access and app backup in your phone's settings at any time.
• Complain to us, or to a data-protection or consumer authority where you live.

To use these rights, email support@clincaa.com. We'll answer within 30 days, and may first ask you to confirm that the account is yours.

8.Deleting your account

In the app, go to Profile → Delete account. Without the app, use our deletion page.

When you delete your account in the app, we sign you out on every device and stop push notifications to your phones right away; a request sent from our website takes effect once we've confirmed it's you. We then permanently delete your account and its data from our servers within 30 days.

Until the deletion is done, other users can still find your name by your username, and caregivers who accepted your invitation can still see the doses your app had already sent us and may be alerted about them — remove your caregivers in the app first if you want that to stop at once. You can still sign in during that time, but that doesn't cancel your request; if you've changed your mind, tell us at support@clincaa.com.

Some data stays after that: backups (up to 4 weeks on our server, and up to 7 weeks for the encrypted copies on Google Drive), AI usage records no longer linked to you (up to 90 days) and server logs (14 days). Our team's account history, pictures of payment receipts, messages our team sent to you alone and notifications that couldn't be delivered have no set time limit, and alerts and invitations already delivered to other people stay in their inboxes.

Deleting your account doesn't cancel a Google Play subscription — cancel it in Google Play.

9.Children

Clinca is not meant for children under 13, and we don't knowingly collect their data. If the law where you live sets a higher age for agreeing to the use of personal data, people under that age may use Clinca only with a parent's or guardian's permission. A parent can keep track of a child's medicines in the parent's own account. If you believe a child under 13 has an account, contact us and we'll delete it.

10.Security

• Every connection to Clinca is encrypted (HTTPS).
• Your session token is kept in your phone's secure storage, and you have no Clinca password that could be stolen.
• One-time codes are kept only in hashed form and expire after 5 minutes.
• Only our team can use the admin panel, each person with their own account. Support staff can view account data but can't change it, changes made in the admin panel are recorded in an activity log, and our team can export lists of accounts and payments for support and accounting.
• Backups on our server can be read only by its administrator, and the copies sent off-site are encrypted before they leave it.
• Photos are stripped of location details on your phone (except a chat photo in a format the app can't re-save) and never stored on our servers.

No system is perfectly secure. If we learn of a breach that affects you, we'll tell you without undue delay and explain what to do.

11.About the AI assistant

Answers come from an AI model and can be wrong. Don't include details you don't need to — such as your full name, ID numbers or other people's information — in your questions or photos. Every answer ends with a reminder that it doesn't replace a doctor. See also our Terms of Use.

12.People listed in the health-care directory

The health-care directory lists doctors, pharmacies, laboratories and hospitals. For each, our team enters the name, photo, specialty, city, area, address, map location, phone and WhatsApp numbers and working hours, and the app shows them to everyone who opens the directory. If you are listed and want your details corrected or removed, email support@clincaa.com.

13.This website

clincaa.com has no ads, no analytics and no tracking cookies. If you switch between light and dark mode, your choice is saved in your browser and never sent to us. Our host, Vercel, records visitors' IP addresses in its logs to deliver the site and protect it from attacks. The account-deletion form doesn't send anything by itself: it opens your email app (or WhatsApp, if you choose) with the request filled in, and we receive only what you choose to send.

14.Changes to this policy

We'll update this policy when Clinca changes. The date at the top shows the current version. If a change is significant, we'll tell you in the app before it takes effect.

15.Contact

Questions or requests about your privacy: support@clincaa.com. You can also reach us on WhatsApp — see Support.

This policy is available in Sorani, Badini, Arabic and English. If the versions differ, the English version applies.