The four documents that govern the use of this service: what we promise, what we do with the data, which cookies we set, and what happens to a clinic's patient data. Written to be read, not skimmed.
Version 2026-10-09 In force since 9 October 2026
What the service is, what you may do with it, what it costs, and who is responsible for what.
A web application for running a clinic: patient records, appointments, visits, laboratory results, documents, consents, billing, and an AI assistant that drafts entries into those records.
It is record-keeping software. It is not a medical device, it does not diagnose, and it is not a way of reaching anyone in an emergency.
You may register a clinic if you are authorised to act for it. You give accurate details, you keep the sign-in details to yourself, and you are responsible for what the users you create do inside the account.
One account belongs to one clinic. No clinic can see another clinic's data.
The service may not be used to:
The assistant proposes; the clinician decides. It reads the record and drafts text, results and appointments, but it can be wrong, and it can miss something a person would notice.
Nothing it produces is saved until a user confirms it, and nobody should confirm anything they have not read. The medical record, and the care of the patient, remain the clinic's responsibility.
The plan is billed per clinic, per month. Prices are shown without VAT, which is charged as the law requires.
Using the assistant draws on prepaid credits, charged by what each request actually costs. Credits that are not used stay on the account.
If an invoice is not paid we may suspend the account, after telling you. A suspension does not delete data.
We aim for continuous availability but we do not promise it: the service depends on hosting, networks and third parties. We may interrupt it for maintenance, and we tell you in advance where we can.
Support is by email, and it is answered by people who know the software.
The data you enter stays yours, and your patients' rights stay with your patients. We hold the data on your instructions, as your processor.
You can export it at any time while your account is open. The privacy section below says how it is stored, where, and for how long.
The software, its interface and its documentation belong to us or to our licensors. Using the service transfers none of it, and the software may not be copied, decompiled or resold.
If you send us an idea, a correction or a suggestion, we may use it without owing you anything for it.
We provide the service with reasonable skill and care. We do not promise it will be free of errors, and we are not responsible for clinical decisions, for data entered incorrectly, or for indirect losses.
Where liability cannot be excluded, ours is limited to the fees paid for the twelve months before the claim. Nothing here limits liability for intent or gross negligence, or anything else that the law does not allow to be limited.
You may end the agreement at any time; the account then runs to the end of the month you have paid for.
We may suspend or end it if these terms are broken or an invoice is unpaid, and we tell you why. After the agreement ends, data is kept for as long as the retention schedule allows and then deleted — so export it before you go.
We may change these terms, and we tell you by email or in the application before a change takes effect. The version you accepted is recorded against your account.
Continuing to use the service after a change takes effect means accepting it.
This agreement is governed by Greek law, and the courts of Athens have jurisdiction. That does not take away any right a consumer has to bring a claim where they live.
Who is responsible for which data, what is processed and why, where it is kept, how long, and what you can ask for.
For the patient data inside a clinic's account, the clinic is the controller and we are the processor: we act on the clinic's documented instructions and for no purpose of our own.
For the data of the people who use the service — accounts, billing, support, and visitors to this website — we are the controller. This section covers both.
We keep as little as we can, and only for these purposes:
The clinic decides what is entered: identity and contact details, the medical record, visits, diagnoses and findings, laboratory results, medication, images and documents, appointments, and the assistant's conversations about a patient.
We use none of it for our own purposes. We do not sell it, we do not share it with advertisers, and we do not train models on it. The clinic answers its patients' requests; we give it the tools to do so — export, correction and anonymisation — and we help when it asks.
Nothing that identifies a patient is sent to a model. A patient is chosen by searching inside the application, and a message that carries an AMKA, a tax number, an identity or passport number, an IBAN, an email address, a phone number, or the name of another patient of the clinic is refused before it leaves: nothing is transmitted, nothing is stored, nothing is charged, and the refusal is written to the audit log.
The name of the patient the conversation is about is replaced with a reference before a request is sent. Inference runs in memory, the provider retains nothing of the request afterwards, and no training is done on the data.
The conversation itself is kept in our own database so that the doctor can read it back, and a scheduled job deletes it after 15 days.
The application, the database and the encrypted backups run on Hetzner in Germany. Inference runs on Scaleway in Paris. Both are in the European Union, and patient data is not transferred outside it.
Two things do leave the EU, and only these. Card payments are handled by Stripe, whose European entity is in Ireland; the card details never reach us. Statistics for the public pages are collected with Google Analytics, which is loaded only if you accept it, and which may process data in the United States under the EU–US Data Privacy Framework and the standard contractual clauses. Transactional email is sent through ZeptoMail's European endpoint.
Invoices are issued electronically through Elorus, a Greek service, as the tax authority requires.
Retention is set deliberately, and it is different for each kind of data:
The measures below are in the software and verified, not intentions:
If you are a patient, your request goes to the clinic that holds your record: it is the controller and it decides, and we help it answer. If you have an account with us, or you have written to us, you may ask us for a copy of your data, for a correction, for deletion, for a restriction, or object to a processing; you may take your data elsewhere; and where a processing rests on consent, you may withdraw it at any time.
We answer within a month. If you are not satisfied, you may complain to the Hellenic Data Protection Authority — and you do not have to come to us first.
Records of minors are part of a patient's record and are held by the clinic on the same terms as any other record. We do not create accounts for children, and we do not process their data for any purpose of our own.
When this policy changes in a way that matters, we tell account holders by email, and the version on this page changes with it.
What we commit to for the patient data in a clinic's account, as Article 28 GDPR requires.
For the patient data in a clinic's account, the clinic is the controller and we are the processor. Accepting the terms also concludes a data processing agreement on the terms in this section, which is what Article 28(3) GDPR requires of the parties.
A copy in writing, countersigned, is available on request.
For as long as we process the clinic's patient data, we will:
Only these, and only for this:
The clinic is the controller, and it keeps that side of the bargain: it decides what is recorded and has a lawful basis for it, it informs its patients, it gives them a way to exercise their rights, and it instructs us only in ways that are lawful.
Anything here that you want explained, or in writing, or signed: [email protected].