Legal
Privacy Policy
Last updated: 06/06/2026
Draft for legal review
This document is a starting template and must be reviewed and finalized by qualified legal counsel before publication, particularly given applicable health-data laws (HIPAA, GDPR, NDPA, and others).
This Privacy Policy explains how Clinithra AI Ltd. ("Clinithra", "we", "us") collects, uses, and protects information when you use our platform and website.
Who we are
Clinithra provides an AI-assisted platform for medical settlement analysis used by insurance companies and their analysts. For account and website data we act as a data controller; for the medical records uploaded by our customers we act as a data processor on their behalf.
Information we collect
- Account information — company details, names, email addresses, and login credentials.
- Claim and patient data — medical records and claim details uploaded by customers for analysis.
- Usage data — limited technical information needed to operate and secure the service.
How we use information
We use information to provide and operate the platform, generate the summaries, reports, and cost projections requested, secure the service, support our customers, and comply with legal obligations.
Legal bases
Where data-protection laws such as the GDPR or the Nigeria Data Protection Act apply, we rely on the appropriate legal basis for each activity, including performance of a contract, our legitimate interests, legal obligations, and, where required, consent.
Patient data and our role
Medical records are uploaded by our customers and processed on their instructions. Our customers are responsible for having a lawful basis to share that data with us, and our handling is governed by the agreement between us.
How we share information
We do not sell personal data. We share information only with service providers that help us operate the platform (for example, hosting and AI processing providers), under appropriate contractual safeguards, and where required by law.
Data retention
We retain information for as long as needed to provide the service and meet legal obligations. Customers can delete claims and accounts, which removes the associated data.
Security
We use access controls, encryption in transit and at rest, and role-based permissions to protect data. See our Security page for more detail.
International transfers
Data may be processed in locations outside your country. Where required, we put appropriate safeguards in place for such transfers.
Your rights
Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.
Cookies
The website uses only the cookies necessary to operate it. If we add analytics or similar technologies in future, we will update this policy and provide any required choices.
Children
The platform is intended for business use and is not directed to children.
Changes
We may update this policy from time to time. Material changes will be reflected by updating the date above.
Contact
Questions about this policy or your data can be sent to info@clinithra.com.