Legal

Privacy Policy

Last updated: 06/06/2026

Draft for legal review

This document is a starting template and must be reviewed and finalized by qualified legal counsel before publication, particularly given applicable health-data laws (HIPAA, GDPR, NDPA, and others).

This Privacy Policy explains how Clinithra AI Ltd. ("Clinithra", "we", "us") collects, uses, and protects information when you use our platform and website.

Who we are

Clinithra provides an AI-assisted platform for medical settlement analysis used by insurance companies and their analysts. For account and website data we act as a data controller; for the medical records uploaded by our customers we act as a data processor on their behalf.

Information we collect

  • Account information — company details, names, email addresses, and login credentials.
  • Claim and patient data — medical records and claim details uploaded by customers for analysis.
  • Usage data — limited technical information needed to operate and secure the service.

How we use information

We use information to provide and operate the platform, generate the summaries, reports, and cost projections requested, secure the service, support our customers, and comply with legal obligations.

Legal bases

Where data-protection laws such as the GDPR or the Nigeria Data Protection Act apply, we rely on the appropriate legal basis for each activity, including performance of a contract, our legitimate interests, legal obligations, and, where required, consent.

Patient data and our role

Medical records are uploaded by our customers and processed on their instructions. Our customers are responsible for having a lawful basis to share that data with us, and our handling is governed by the agreement between us.

How we share information

We do not sell personal data. We share information only with service providers that help us operate the platform (for example, hosting and AI processing providers), under appropriate contractual safeguards, and where required by law.

Data retention

We retain information for as long as needed to provide the service and meet legal obligations. Customers can delete claims and accounts, which removes the associated data.

Security

We use access controls, encryption in transit and at rest, and role-based permissions to protect data. See our Security page for more detail.

International transfers

Data may be processed in locations outside your country. Where required, we put appropriate safeguards in place for such transfers.

Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.

Cookies

The website uses only the cookies necessary to operate it. If we add analytics or similar technologies in future, we will update this policy and provide any required choices.

Children

The platform is intended for business use and is not directed to children.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Contact

Questions about this policy or your data can be sent to info@clinithra.com.