Skip to content
Kliniqo

Privacy policy

What Kliniqo collects, why, where it is kept, who else sees it, and what you can ask of us. In force from 02/10/2026.

Who we are

Kliniqo is an app and a website for booking laboratory tests and reading your reports, and software that pathology laboratories use to run their work.

Kliniqo is provided by Priyam Rupapara, trading as Kliniqo, Gurukrupa, Jyotinagar-1, IOC Main Road, Kalavad Road — 360005, Rajkot, Gujarat, India.

This policy covers the Kliniqo app for iPhone and Android, the patient pages of this website, and this website itself.

Who is responsible for your information

  • For your Kliniqo account — how you sign in, what you book through Kliniqo, the family members you add and what you agree to — Kliniqo is responsible. The law calls this the data fiduciary.
  • Your test reports are made by the laboratory that tested you, and that laboratory is responsible for them. Kliniqo keeps and shows them for the laboratory, as its data processor.

A question about a report itself, such as a value or a name spelt wrong, goes to that laboratory. A question about your account comes to us.

What we collect

  • Your mobile number, name, date of birth and sex, and your email if you give it.
  • The tests, results and reports of the laboratories that tested you, and of the family members you add.
  • The tests you book, the address and time for a home collection, and what you pay.
  • For each phone or browser you sign in on: the name it gives itself, the app's version, when you signed in, and a key the phone makes so that your sign-in cannot be copied to another phone.
  • Each time you agree to something or take it back: what it was, the notice you read, and when.
  • The settings you choose, such as your language and whether you get WhatsApp messages.
  • For laboratory staff and doctors who sign in: their name, email, mobile number and role, and a record of every change they make.
  • For visitors to this website: the address a request came from, the page and the time, in the server's records.

What we do not do

  • No advertising, no tracking across other apps or websites, and no selling of anyone's information.
  • Card and bank details go to the payment company and are never stored by Kliniqo.
  • The app does not read your contacts. It asks for a permission such as notifications or Face ID only when you use the feature that needs it, and keeps working if you say no.
  • We do not use your information to train any AI model.

Why we use it

  • To sign you in, and to keep your account safe: to spot a sign-in that is not yours and let you end it.
  • To show you your reports and your family's, and how your results have changed over time.
  • To arrange your collection with the laboratory, and to take or refund your payment.
  • To tell you what you asked to hear about: a report is ready, a booking has changed, a check is due.
  • To keep the records the law asks of us and of laboratories.

Optional uses, like reminders, stay off until you turn them on, and turning one off is a single tap in Me › Privacy.

Who else sees it

  • The laboratory that tests you: your booking, what it needs to collect your sample, and your reports, which it made.
  • People you choose: a family member you allow to see your reports, or someone you send a report's link to, until you stop it or the link ends.
  • The companies that run parts of Kliniqo for us, each under contract and each only for its own task, listed below.
  • The police, a court or a regulator, only when the law requires it.

The companies that work for us

  • Supabase: the database, in Mumbai.
  • Vercel: the servers that run Kliniqo.
  • Cloudflare: the website's addresses, report files and encrypted backups.
  • Meta: WhatsApp messages. A message says a report is ready; it never carries a result.
  • The payment company named when you pay: payments and refunds.
  • Apple and Google: notifications to your phone, and the check that your copy of the app is genuine.
  • Expo: carries the app's notifications on their way to Apple and Google. It is outside India, and a notification never carries your name or a result.
  • Google Fonts: the typeface a laboratory may choose for its own pages, which your browser fetches from Google.
  • Anthropic: only on this website, and only where a laboratory has switched on its report explanations. It is outside India, and the app does not use it.

Where it is kept

Your information is stored in India: the database is in Mumbai.

Every laboratory's records are kept apart from every other laboratory's by the database itself, not only by the app.

How long we keep it

  • Your account, its settings and its sign-ins: until you close the account.
  • Reports: for as long as the laboratory that made them must keep them, which can be years, even after you close your account.
  • Payments and invoices: for as long as tax law requires.
  • Security records: for as long as the law requires, then deleted.

Closing your account ends every sign-in at once. What is yours alone is then deleted, and what the law asks us or a laboratory to keep is kept locked away for as long as it asks.

Your rights

  • You can download your information, ask for it to be corrected, or close your account in Me › Privacy.
  • On this website, the patient pages let you download everything held under your number.
  • You can take back anything you agreed to, as easily as you gave it. The use stops from then on.
  • You can name a person to use these rights for you if you die or cannot act yourself. Write to our grievance officer to do so.
  • Questions and complaints go to our grievance officer, whose details are below. You may also complain to the Data Protection Board of India.

Children

  • You must be 18 or older to have a Kliniqo account.
  • A parent or lawful guardian may add a child under 18, book the child's tests and read the child's reports.
  • A child's information is used only to book the child's tests and show the child's reports: never for offers, advertising or AI, and never to build a profile of the child.
  • When the child turns 18, they can have an account of their own.

Keeping it safe

  • Every connection is encrypted, and your reports are shown only after you sign in.
  • When you sign in on a new phone or browser, your other devices are told, and you can sign it out.
  • If your information is ever exposed, we will tell you and the Data Protection Board, as the law requires.
  • Found a weakness? Please tell us, as our security page explains.

Cookies

This website sets only the cookies it needs: one to keep you signed in and one to remember your language. None is for tracking or advertising.

Changes to this policy

When this policy changes, the new date is shown at the top. If a change affects something you agreed to, the app asks you again before anything new is used.

Contact

We answer in English, Hindi or Gujarati.