Your health story stays yours.

Who we are

Clyvio Health (“Clyvio”, “we”, “us”) provides software that clinics use to run their day and to keep patients and their families connected to their care. This policy explains how we handle personal information when you use the Clyvio clinic console, the Clyvio patient app (including apps branded with your clinic's name), and this website.

Clinics, patients and us

Your medical record belongs to your care, and your clinic is responsible for it. When a clinic uses Clyvio, the clinic decides what is recorded and why — in legal terms it is the data controller (or covered entity). Clyvio processes that information on the clinic's behalf, under a written agreement, as a data processor (or business associate).

For information we handle for our own purposes — such as clinic staff accounts, messages you send us, and this website — Clyvio is the controller.

What we collect

Information your clinic records

• Your name, contact details, date of birth and other details the clinic needs to identify you.
• Appointments, visit notes, diagnoses, prescriptions, care plans, vitals and follow-ups.
• Lab orders, reports, documents and images linked to your record.
• Billing records such as orders, payments and receipts.

Information you give us

• Your phone number and profile, and the family members you invite to your Care Circle.
• Questions you ask Ask My Care, and documents or reports you upload.
• Your consent choices and your language and notification preferences.
• Messages you send us, including through the contact details on this website.

Information collected automatically

• Security and audit records of who accessed which record, when, and from which device and network.
• Basic technical information such as device type, app version and error logs, used to keep Clyvio working.
• Delivery status of reminders and notifications, such as whether a WhatsApp message was delivered.

How we use it

• To provide care services — scheduling, queues, prescriptions, care plans and records for your clinic.
• To keep you and your family informed — reminders for medicines, tests and visits, and access to your care memory.
• To answer your questions — Ask My Care explains what your doctor recorded, with the source.
• To keep information safe — verifying access, detecting misuse and keeping audit trails.
• To support you — responding when you or your clinic contact us.
• To meet legal obligations — such as health-record retention and lawful requests.
• To improve Clyvio — using de-identified or aggregated information only.

We do not sell personal information, and we do not use it for advertising or to build marketing profiles.

AI and your data

Clyvio uses AI to draft consultation notes for doctors to review, and to explain your care in plain language. We designed it with strict limits:

• Answers come only from your care plan, your visit records and the guidance your doctors publish in Knowledge Studio — never from the open internet.
• Before any information is sent to an AI model, names, phone numbers, email addresses and identity numbers are removed, ages are grouped into ranges, and exact dates are obscured.
• AI never approves a care plan. Every plan is reviewed and approved by a doctor.
• If the answer isn't in your record, Clyvio says so and suggests you ask your clinic. Urgent warning signs are escalated to your doctor.
• We use AI providers only under agreements that limit their use of the information to providing the service.

Consent and legal bases

We ask for consent by purpose, so you can agree to some things and not others — for example, care delivery, WhatsApp updates, telehealth, or de-identified research. You can withdraw any of these at any time from the app or by writing to us, and it takes effect immediately. Withdrawing consent doesn't affect processing that has already happened lawfully.

Depending on where you live, we rely on your consent, on the need to provide the service you or your clinic requested, on legal obligations (such as record retention), or on legitimate interests such as keeping Clyvio secure. Health information is only processed as permitted by applicable health-data laws.

Who can see it

• You, and anyone acting as your guardian.
• Family members you invite — and only what you allow them to see.
• Your clinic's care team, according to their role (for example, the front desk doesn't see what only a doctor needs).
• Clyvio staff, only when needed to support your clinic or keep the service secure, and every access is logged.
• Service providers who help us run Clyvio — such as cloud hosting, messaging (including WhatsApp), email and AI providers — under contracts that protect your information.
• Authorities, only when the law requires it.

Each clinic's data is kept separate. No clinic can see another clinic's patients.

How we protect it

• Medical documents and attachments are encrypted at rest with AES-256-GCM, and information is encrypted in transit.
• Every request to read or change a record is checked against who you are and your relationship to the patient.
• Every view, download, export and change of health information is recorded in an audit log that can't be edited.
• Access for our own staff is limited to what their role requires.

Where information is transferred across borders, we use the safeguards required by applicable law. No system is perfectly secure; if a breach affects your information, we will notify you and the relevant authorities as the law requires.

How long we keep it

We keep health records for as long as your clinic uses Clyvio and for as long as health-record laws require after that — these periods vary by country and are often several years. Account and contact information is kept while your account is active. Audit logs are kept as long as needed for security and legal purposes.

If you close your account, your login and contact details are erased or de-identified. Your medical history is kept only where the law requires your clinic to retain it.

Your rights

Depending on where you live, you have the right to:

• Access your information and take it with you — you can download your full record from the app in one machine-readable file.
• Correct information that is wrong — for clinical records, we'll work with your clinic to do this.
• Delete your account, subject to health-record retention laws.
• Withdraw consent for any purpose, at any time.
• Object to or restrict certain processing.
• Nominate someone to exercise your rights if you are unable to.
• Complain to your data protection or health privacy authority.

You can use most of these directly in the app. For anything else, write to us and we'll respond within the time the law requires.

Children and guardians

Children's records are created by their clinic and managed by a parent or legal guardian through guardian controls. We don't knowingly let children create their own accounts. Guardians can see, manage and withdraw access on a child's behalf, as the law allows.

This website

This marketing website doesn't use advertising or tracking cookies, and every font and image is served from our own domain — no third party learns that you visited. If you fill in a form or email us, we use what you send only to reply to you.

Changes to this policy

We'll update this policy as Clyvio changes or the law requires. If a change is significant, we'll tell you in the app or through your clinic before it takes effect. The date at the top of this page shows when it last changed.

Contact us

For questions, requests or complaints about privacy — including to reach our grievance officer — write to hello@clyviohealth.com. If your question is about a specific medical record, you can also contact your clinic directly.