Privacy and data protection

What data we process

Klinik AI is a software service that processes the correspondence clinics conduct with their international patients. Two categories of data are involved:

• Clinic data — clinic name, details of the responsible person, treatment and price tables, staff accounts.
• Patient data — the patient's name, contact details, language, country, the messages and photographs they send, treatment preference and the answers given in the pre-operative medical form.

Who is the controller

For patient data the clinic is the controller. Sad Marine FZE LLC acts as processor, on the clinic's instructions. It is the clinic's obligation to obtain the required notices and consents from its own patients.

Health data

The pre-operative medical form, photographs and analysis results are special category data. They are shown only to authorised users of the clinic concerned, and are never transferred to another clinic, to a third party, or to anyone for advertising purposes.

Isolation

Each clinic's data is held in its own space. The system verifies on every request that the user belongs to the clinic concerned; unauthorised access attempts are refused.

Use of artificial intelligence

Patient messages are transmitted to a large language model provider for the sole purpose of generating a reply. The AI does not make medical diagnoses, does not recommend medication and gives no treatment guarantee; it cannot act outside the limits set by the clinic.

Retention and deletion

Data is retained for as long as the clinic uses the service. On the clinic's request all of its patient data is permanently deleted. A patient may ask their clinic to delete data relating to them.

For data requests: sadmarine.du@gmail.com

Sub-processors

Delivering the service involves providers for hosting, messaging (Meta, for WhatsApp and Instagram), telephony (Twilio), payments (Stripe) and artificial intelligence. Each has access only to the data its own function requires.