Effective date:
This policy covers the Klinic2Go Android app and the website klinic2go.com. It says what we keep, where, who can see it, and what you can ask of us.
1. Who we are
Klinic2Go is made and run by MobileBiz Systems Pte Ltd, a private limited company in Singapore (“we”, “us”). Our privacy officer answers at help@klinic2go.com. Put “Privacy” in the subject line.
2. Patients’ records belong to the doctor
The doctor decides what goes into a patient’s record, as with paper charts. Under the Data Privacy Act of 2012, that makes the doctor the personal information controller: the one who decides about the records, answers to patients for them, and gives them the doctor’s own privacy notice. We are the doctor’s personal information processor: we provide the app and handle records only on the doctor’s instructions.
Patients: questions about your record, a copy of it, or a correction go to your doctor. If you write to us, we pass your request to your doctor and help the doctor answer. We cannot open your record ourselves.
For information about doctors, their staff, website visitors and people on the early list, we decide what is kept, so we are the controller (sections 4, 5 and 7).
3. Where records are kept
- On the doctor’s phones and tablets and the secretary’s phone, so the app works with no internet. The secretary’s phone holds only patients’ front-desk details (names, contact details, bookings and bills); diagnoses, allergies and notes never go to it.
- In the doctor’s own Google account, as a locked backup (section 5).
- For a short time on our servers in Singapore, which carry changes between the practice’s phones and tablets. They are encrypted before they leave the phone, and we cannot read them. They are deleted within 38 days at the latest.
We do not sell records, use them for advertising, analyse them, or use them to train any system, AI included.
4. What we hold
- Subscription. Google Play runs the trial and takes the payment; we never see card or GCash details. Google Play tells us whether the subscription is active and its dates. We keep this as long as tax law requires.
- Technical details needed to keep the practice’s phones and tablets up to date, such as basic details of each phone and tablet. They carry no names and no part of a record. We keep them only as long as we need them to run the service, then delete them.
- Server logs of internet addresses and times, kept about 30 days, to keep the service running and safe.
- Support messages to help@klinic2go.com, kept only as long as we need them to help you. Please do not send patient details; use a made-up patient to show a problem.
We hold these to provide the service, to meet the law, and to keep the service safe. The app has no ads and no tracking tools, and makes no automated decisions about anyone.
5. Google account and backup
- What the app accesses. The doctor signs in with the doctor’s own Google account. The app asks for one Google Drive permission, limited to the app’s own backup. It cannot see or change the doctor’s other files. It also reads the account’s email address and basic account details, to show and recognise which account is in use. These stay on the device.
- How it is used. To keep the locked backup, to restore it on a new phone or tablet, and to add the doctor’s own phones and tablets.
- How it is stored. The backup holds the records, lab photos and the doctor’s signature. It is locked before it is uploaded and stays in the doctor’s Google Drive. Protect that Google account with two-step sign-in: anyone who gets into it could restore the records. We do not receive a copy.
- How it is shared. It is not. Nothing received from Google is sold, used for ads, or used for anything but the above.
- Klinic2Go’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. The patient’s copy by QR
Off until the doctor turns it on. Then the doctor can show a QR, and the patient gets a link to a locked copy of the prescription or certificate. Only that link opens it; we cannot. The link works for 3 days, and the copy is deleted from our servers within two weeks. Patients should treat the link like the paper, and not post or forward it.
7. The early list and this website
The early list. We ask for your name, email, specialty, clinic city and, if you choose, a mobile number, to tell you when Klinic2Go is ready. If you gave a number, we may call or text about joining. Only our staff see the list. We keep it until you ask to be removed, or 12 months after the app opens to everyone. To be removed, write to help@klinic2go.com; we do it promptly.
This website has no ads. When switched on, Google Analytics counts visits with cookies, so we know how the site is used. It gets nothing you type into the form, and keeps the data 2 months. To opt out, use Google’s opt-out add-on or block cookies for klinic2go.com. Our web server keeps visit logs for about 30 days.
8. Who else handles information
Google handles information for us: Google Cloud (Google Asia Pacific Pte Ltd, Singapore) runs our servers and this website; Google Play takes payments; Google Analytics counts website visits. Some of this, and the doctor’s Drive backup, may be kept outside Singapore and the Philippines; we protect it as this policy and the law require. We share information with authorities only when the law requires it, and tell the doctor first unless the law forbids it. We cannot hand over records we cannot read.
9. Keeping it safe
Records are encrypted before they leave the phone, and we cannot read them. If a phone or tablet has a screen lock, the app opens only with it, so set one on each. A phone or tablet removed in Settings can no longer open the records. Access to our servers is limited to staff who need it, and they are bound to confidentiality.
No system is perfectly safe. If a breach affects information we handle for a doctor, we tell the doctor promptly and help the doctor tell the National Privacy Commission and patients, as the law requires. If it affects your own information, we tell you and the regulators as the law requires.
10. Your rights
Under the Data Privacy Act you may ask what we hold about you, ask for a copy, ask us to correct or delete it, object to its use, and ask for a copy you can take elsewhere. Write to help@klinic2go.com; we answer as the law requires. You may also complain to the National Privacy Commission (privacy.gov.ph) or Singapore’s Personal Data Protection Commission (pdpc.gov.sg). Patients use these rights through their doctor.
Removing the doctor’s data: remove a phone or tablet in Settings, or uninstall the app; delete the backup in Google Drive (Settings, then Manage apps, Klinic2Go); changes on our servers are deleted on their own within 38 days. Write to us and we delete the rest of what we hold about the practice, except what the law makes us keep.
The app and the early list are for doctors and their staff; we do not knowingly collect information from children. Records of child patients are kept by the doctor.
11. Changes and contact
If we change this policy, we post the new version here with a new date. If a change affects how patients’ records are handled, we tell doctors in the app or by email first.
MobileBiz Systems Pte Ltd, Singapore. Email: help@klinic2go.com.