Privacy Policy
Effective 3 October 2026
ClinicPro helps you book appointments with the clinics you visit and keep your medical reports in one place. Your health information is sensitive, so this policy explains exactly what we collect, who can see it, and the choices you have. It applies to the ClinicPro website (clinicpro.aaplink.com) and the ClinicPro mobile apps for Android and iOS.
1. Who we are
ClinicPro is operated by aaplink.com (“we”, “us”). For personal data you give us directly — your account, the reports you upload and your sharing choices — we are responsible for that data. Clinics that use ClinicPro are separately responsible for the medical records they create about you, such as visit notes and the reports they add.
Questions about privacy: support@aaplink.com.
2. The short version
- A clinic can see only the visits and reports from its own clinic. Anything from your other clinics stays private unless you choose to share it, and you can stop sharing at any time.
- We do not sell your data, show ads, or use advertising or analytics trackers.
- For identity checks we store only the type of ID and its last 4 characters — never a copy or the full number.
- You can delete your account and data yourself at any time. See Delete your account.
3. Information we collect
| Category | What | Why |
|---|---|---|
| Account details | Name, email address, phone number (optional), date of birth, password (stored only as a one-way hash), account type | To create and secure your account, let clinics recognise you, and contact you about your appointments |
| Clinic enrollments | The clinics you joined with their code, and when | So you can book with those clinics and they can see you as their patient |
| Identity verification | ID document type (e.g. Aadhaar, passport), the last 4 characters of its number, which clinic verified you and when | To confirm you are who you say you are before appointments can be booked, protecting your records from impersonation |
| Appointments | Clinic, doctor, date and time, service, fee, the reason you give, the clinic’s notes and the appointment status | To book and manage appointments and keep your visit history |
| Health reports | Files you or your clinics upload (PDFs and images such as lab results, prescriptions and scans), with their title, type, date and notes | To keep your medical documents in one place and let you share them with clinics you choose |
| Sharing choices | Which reports and which clinic’s visit history you have shared with which of your clinics | To enforce your consent |
| Reviews | Ratings and comments you leave after a completed visit (shown with your first name only) | To help other patients of the same clinic |
| Clinic and staff details | For clinic accounts: clinic name, address, contact details, doctors, schedules, services and fees | To run the clinic’s presence on ClinicPro |
| Technical data | IP address and request information processed by our servers, and a session cookie (website) or a session token stored securely on your device (app) | To keep you signed in, protect the service from abuse (for example, rate limiting sign-in attempts), and fix problems |
Device permissions (mobile app)
- Camera — only when you choose to scan a clinic’s QR code or photograph a report. QR scans are read on your device and not stored; photos are uploaded only if you confirm the upload.
- Photos and files — only the specific photo or document you pick to upload.
We do not access your location, contacts, microphone or other apps.
4. How we use information
- To provide the service: accounts, clinic enrollment, identity verification, appointments, reports and sharing.
- To send service emails from support@aaplink.com: email verification, password resets, appointment updates, identity-verification and new-report notices. We do not send marketing emails.
- To keep the service secure, prevent fraud and abuse, and comply with the law.
We process your information on the basis of your consent (which you give when you create an account, upload reports and choose what to share) and to provide the service you request. You can withdraw consent by changing your sharing settings or deleting your account.
5. Who can see your information
| Information | Who can see it |
|---|---|
| Your profile (name, contact details, date of birth, verification status) | You, and the clinics you are enrolled with (including their doctors) |
| Visits at a clinic, including the doctor’s notes | You and that clinic. Another of your clinics only if you share that clinic’s visit history with it. |
| Reports a clinic added | You and that clinic. Another of your clinics only if you share that report with it. |
| Reports you uploaded | Only you, until you share a report with specific clinics |
| Your reviews | Other patients of that clinic (first name only) |
Platform administrators can see account and clinic details needed to run the service (for example to approve clinics or suspend abusive accounts). Administrators have no access to your visits, notes or reports through ClinicPro.
Service providers
We use Hostinger to host our servers, database and email. They process data only on our instructions to provide these services. We do not sell, rent or trade personal information, and we do not share it with advertisers or data brokers.
Legal requirements
We may disclose information if required by law, court order or a lawful request from authorities, or to protect someone’s life or safety.
6. How we protect information
- All connections use HTTPS encryption.
- Passwords are stored as bcrypt hashes. Changing your password signs you out on all devices.
- Access rules are enforced on our servers for every request, so a clinic cannot see what you have not shared.
- Report files are checked to be genuine PDFs or images and are opened only through links that expire after 5 minutes.
- On your phone, your session is kept in the device’s secure storage (Keychain on iOS, Keystore on Android).
No system is perfectly secure. If we learn of a breach affecting your data, we will notify you and the authorities as required by law.
7. How long we keep information
We keep your information while your account is active. When you delete your account, we permanently delete your account, enrollments, appointments, reports, sharing choices and reviews from our live systems immediately. Copies may remain in backups for a limited period until those backups are overwritten. Clinics you visited may keep their own medical records outside ClinicProwhere the law requires them to.
8. Your rights and choices
- Access and correction — see your data in the app or website and update your profile in Account settings. Ask a clinic to correct visit details it recorded.
- Control sharing — choose which clinic can see which report and whose visit history, and revoke at any time (Privacy & sharing).
- Deletion — delete your account yourself, or email us. See Delete your account.
- Withdraw consent — stop sharing or delete your account. This does not affect processing that already happened.
- Grievances — contact our Grievance Officer (below). You may also complain to the data protection authority in your country.
9. Children
ClinicPro accounts are intended for adults (18+). A parent or guardian should manage a child’s appointments. We do not knowingly collect data from children without the consent of a parent or guardian; if you believe a child has created an account, contact us and we will delete it.
10. Where data is stored
Your information is stored on servers provided by our hosting provider. It may be processed outside your state or country, with the protections described in this policy.
11. Changes to this policy
We will post any changes here and update the effective date. For significant changes we will notify you by email or in the app before they take effect.
12. Contact and grievance officer
Grievance Officer, ClinicPro
Email: support@aaplink.com
We aim to acknowledge complaints within 48 hours and resolve them within 30 days.