CLIMS Privacy Policy
CLIMS helps clinics and solo practitioners manage patients, tokens, visits, billing records and staff. Contact clims.app@gmail.com for privacy questions.
Scope and responsibility
This policy covers the CLIMS Android app (package com.clims) and its connected clinic-management service. Devanand G is the publisher and privacy contact. Clinics and practitioners are responsible for deciding which patient records to enter and which staff may access them. Contact the relevant clinic for questions about your care or corrections to a clinical record.
Information processed
- Account and team information: names, email addresses, mobile numbers, usernames, designations, clinic assignments and authentication information.
- Clinic records entered by authorized users: patient names and identifiers, optional contact/address/demographic information, visits, assigned doctors, treatment notes when entered, charges, payments and collection history.
- Operational information: device identifiers for offline authorization and token issuing, sync commands, timestamps, activity/audit logs, feature-usage events and error information needed to operate the service.
Why it is used
We use this information to authenticate users, verify email, enforce clinic access, synchronize offline work, provide requested reports and bills, support users, protect accounts and understand aggregate product usage. This release offers a 90-day trial and does not accept in-app subscription payments. Patient billing entries record clinic transactions; CLIMS does not collect those patient payments.
Access and service providers
Authorized clinic staff can access records according to their organization and clinic assignments. Separate organizations do not share patient records. Provider administrators see customer account and aggregate operational information; they do not receive access to patient records through the provider dashboard.
Our hosting provider, Hetzner, processes server data on our behalf. Resend processes email addresses and the contents of verification or requested report emails. If you request an emailed report, it may contain clinic records. Information may also be disclosed where legally required. We do not sell patient records or use them for advertising.
Offline storage and exports
CLIMS stores an encrypted local cache and pending changes on the device. Network requests use HTTPS. These safeguards are not a guarantee against all risks. Bills, screenshots and exported files that you download or share leave the protected app cache; their recipients and the selected messaging/storage service control those copies. Clinic logos used for bills are stored on the device rather than uploaded as a clinic logo.
Device permissions and user choices
The Android app uses internet access for sign-in, verification and synchronization. On Android 9 and earlier, it may request storage permission when you download a bill. On newer Android versions, downloads use scoped system storage. Clinic logos are selected by you through the system picker. The current release does not request access to your contacts, SMS, microphone, camera or precise device location. A patient or clinic address typed into a form is still personal information, even though the app does not use GPS.
You choose whether to add optional patient contact details and treatment notes, export records or share a bill. Account identifiers and operational records are needed for the corresponding service. Disabling connectivity postpones synchronization; it does not delete queued data.
Retention and deletion
Account and clinic records are retained while needed to provide the service. You may request account deletion and associated personal-data deletion at any time. We verify the request, review the scope, delete data that is no longer required and explain any data retained, the reason and applicable retention period. Clinic-owned medical, financial and audit records may require separate review with the clinic for continuity, security or legal obligations; closing a staff account does not automatically erase the clinic’s records. Copies in backups are handled through backup rotation. We do not treat staff deactivation as completed account deletion.
Request account and data deletion. A request does not require reinstalling CLIMS. Contact us to request access to, correction of, or a copy of your information. For patient-record changes, also contact the clinic responsible for the record.
Health information
CLIMS is used for healthcare administration and can store health-related records entered by clinic staff. It does not diagnose conditions, recommend treatments, calculate medication doses or replace a healthcare professional. It is not intended for emergency assistance.
Your responsibilities and policy updates
Clinic users should enter only information they are authorized to process, protect device access and use exports responsibly. CLIMS is intended for professional clinic staff, not for children to create their own accounts. Material changes to this policy will be reflected on this page.