Background Pattern
Privacy-First Healthcare

Data Privacy &
Confidentiality.

At CLARA™, we treat data protection as a fundamental responsibility — for patients, medical students, and healthcare professionals alike. We are committed to safeguarding your personal, educational, and clinical information.

Last Updated: July 2026

Information Flow

Health & Educational Data Protection

We process health-related information, learning activity, and clinical entries exclusively to deliver personalised educational and support experiences. We never use this data for advertising or sales.

User Identity & Role Verification

Personal details such as your name, role (patient, student, or professional), and where applicable your registration number, are collected strictly for identity verification, role-appropriate access, and audit purposes.

Purpose Limitation

Data usage is strictly limited to improving the accuracy, safety, and educational performance of CLARA™ for all user groups. We follow the principle of data minimisation at every layer.

Infrastructure

  • Advanced Encryption

    AES-256 encryption for data at rest and TLS 1.3 for data in transit across all environments.

  • Access Control

    Strict role-based access controls and identity verification to ensure only authorised personnel interact with system logs.

  • Patient Rights

    Fully aligned with GDPR (EU/EEA) and equivalent data protection legislation, including rights of access, deletion, and portability.

Institutional & Academic Users:Please refer to your organisation's or institution's Data Processing Agreement (DPA) for local specifics regarding student and professional data.

What Data We Collect

AccountName, email address, and password (hashed — we never see it in plain text)
Health BiometricsHeart rate, SpO₂, HRV, steps, calories, distance, sleep stages, and body temperature — collected from your connected health wearable (mobile app only)
Health Check-insYour daily assessment answers and symptom logs
AI ConversationsMessages you send to CLARA and the responses you receive
Goals & PreferencesHealth goals and notification preferences you configure within the app
Professional DataRole, specialty, and registration number — collected from healthcare professionals for role-appropriate access (web platform only)
Device InfoApp version and OS type — used solely to diagnose technical issues

How We Use Your Data

  • Generate personalised health insights, recovery scores, and clinical summaries
  • Power CLARA's AI coaching and clinical reasoning with context about your health and role
  • Send health-relevant push notifications (e.g. step goal progress, sleep insights, appointment reminders)
  • Improve the accuracy of our AI models — using only anonymised, aggregated data
  • Maintain the security, reliability, and regulatory compliance of your account

Legal Basis for Processing (GDPR)

ContractProcessing your account data to deliver the CLARA service you registered for
ConsentProcessing your health biometrics and AI conversation data — you may withdraw consent at any time
Legitimate InterestSecurity monitoring, fraud prevention, and improving service reliability

Third-Party Data Sharing

  • We do NOT share your data with any third party for advertising or commercial purposes
  • We do NOT share health data with insurers, employers, or government bodies (except as required by law)
  • We use trusted, certified cloud infrastructure providers — they are contractually bound to process data only on our instructions
  • AI-powered features use enterprise-grade AI services under strict data-handling agreements — your data is never used to train external AI models

How Long We Keep Your Data

Active accountsData is kept for as long as your account is active
After deletionAll personal data is permanently deleted within 30 days of an account deletion request
Anonymised dataAggregated, de-identified statistics may be retained for research — they cannot be linked back to you

Your Rights (GDPR & Privacy Laws)

AccessRequest a copy of all data we hold about you
RectificationCorrect inaccurate information in your profile
ErasureRequest permanent deletion of your account and all associated data
PortabilityReceive your data in a structured, machine-readable format
RestrictionAsk us to pause processing your data while a dispute is resolved
ObjectionObject to processing carried out under legitimate interest
Withdraw ConsentWithdraw consent for health data processing at any time — this does not affect past processing

Children's Privacy

  • CLARA is intended for users aged 18 and over
  • We do not knowingly collect personal data from anyone under 18
  • If you believe a minor has provided us with data, contact privacy@claramd.ai immediately

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via push notification or email at least 14 days before they take effect. Continued use of CLARA after that date constitutes acceptance of the updated policy.

Exercise Your Privacy Rights

Whether you are a patient, a medical student, or a healthcare professional — contact our privacy team to exercise your rights, request data export, or ask any questions about how your data is handled.