Last updated: September 16, 2026
TinyClin is a clinic management platform operated by Way WeDesign. This policy explains what information we collect when a clinic ("Customer") and its staff use the platform, and how that information — including any patient data a Customer stores in the platform — is handled.
Two roles matter here. For account and billing information (your name, email, clinic details, payment history), we act as data controller — we decide why that data is collected. For patient records, appointments, and messages a Customer enters into the platform to run their clinic, we act as data processor — the Customer controls that data, and we only process it on their instructions, to provide the service.
Clinics use TinyClin to store patient records, appointment history, treatment categories, medical notes, and communications with patients (including WhatsApp messages). This data belongs to the Customer clinic, not to us. We process it only to operate the platform — to display records, send reminders the clinic requests, generate reports, and similar functions.
We apply role-based access control so staff only see the patients and records their role permits, encrypt data in transit, and log administrative and staff actions through the platform's Activity Log. Access to production data is restricted to authorized personnel for support and maintenance purposes.
[Placeholder — confirm before publishing:] If TinyClin is marketed as suitable for handling U.S. patient health information, the specific administrative, technical, and physical safeguards in place (encryption at rest, audit logging retention period, breach notification process, signed Business Associate Agreements with subprocessors) should be described accurately here, and reviewed by counsel, rather than asserted as a general compliance claim.
We share data with the following processors, only as needed to deliver the service:
We do not sell Customer or patient data, and we do not use patient data for advertising.
The AI Message Composer drafts messages based on a prompt and optional patient context supplied by clinic staff. Generated drafts are shown to staff for review and edited before sending — the platform does not send AI-generated messages automatically.
We retain Customer and patient data for as long as the clinic's subscription is active, plus a reasonable period afterward to allow account recovery, unless the Customer requests earlier deletion or a longer period is required by law. Activity logs are retained separately for security and audit purposes.
A clinic's patients should direct requests to access, correct, or delete their information to the clinic, since the clinic controls that data. Clinic staff and admins can request access to or deletion of their own account information by contacting us directly.
TinyClin is intended for use by clinic staff, who may enter patient records for individuals of any age (including minors) as part of normal clinic operations. We do not knowingly collect information directly from children through the platform's own account-creation flow.
We may update this policy from time to time. Material changes will be communicated to clinic admins by email or an in-app notice before they take effect.
Way WeDesign, 47/1403A, Ivees, MRERA-69, Chalikkavattom, Vennala, Kochi, Kerala, India
Email: contact@waywedesign.com
Phone: +91 7994643673
© 2026 Way WeDesign. A product by Way WeDesign