Privacy Policy

1. Data We Collect

We collect:

• Account and profile information
• Messages, bookings and operational data entered by your team
• Technical logs and device information
• Website analytics and cookies

2. How We Use Data

We use data to:

• Operate and deliver the Service
• Support your team
• Maintain platform security
• Improve reliability and performance

We may use anonymized and aggregated data to train AI models and improve features. Anonymized data contains no personal identifiers.

3. Dokwise as Data Processor

Your clinic is the data controller for all personal and patient data.

The Company acts as the data processor and processes data only according to your documented instructions.

We follow safeguards aligned with PDPA, GDPR and HIPAA style requirements. We do not use identifiable patient data for unrelated purposes. You are responsible for ensuring you have a lawful basis to provide patient data to the Service.

The Company acts as a data controller only for anonymized system data that cannot identify any person or clinic.

4. Legal Basis and Purpose Limitation

In line with PDPA and GDPR principles, we process personal data only:

• to deliver the Service
• to secure the platform
• under your instructions
• for legitimate operational purposes

We do not sell personal data.

5. Security Protections

We apply strong safeguards, including:

• End to end encryption
• Encrypted data at rest
• MFA for account access
• Role based access controls
• Full audit logs
• Continuous monitoring
• Automated backups and recovery
• Regular penetration testing

These measures align with PDPA, GDPR and HIPAA style expectations.

6. Data Residency

Data is stored within your country or region of operation. Backups follow the same residency requirements.

7. Incident Response

If a breach or security incident occurs, we will notify affected users within twenty four hours and communicate updates clearly.

8. Data Sharing

We do not sell personal data. We share data only with:

• trusted infrastructure providers under strict confidentiality
• authorities when required by law
• your organization as instructed by you

9. Data Retention and Deletion

We retain data only as long as required to deliver the Service or comply with legal obligations. You may request data export or deletion at any time.

10. User Rights

Depending on your jurisdiction, you may request:

• access to your data
• correction
• deletion
• export

We provide reasonable tools to support these rights.

11. Cookies

We use cookies for essential functionality, analytics and security.

12. Updates

We may update this Policy. You will be notified of material changes.

13. Company Information

Health AI Labs Pte. Ltd.
UEN: 202526642C
Address: 68 Circular Road, #02-01, 049422, Singapore

For privacy related inquiries, contact our Data Protection Officer at dpo@health-ai-labs.com.