Privacy Policy

1. Who This Policy Covers

This policy applies to two types of users:

• Clinic users — clinic owners or managers who create and manage a clinic account on Rylxo
• Patients — individuals who book appointments through a clinic's public booking page

2. What Information We Collect

From clinic users (on signup and onboarding):

• Full name and email address
• Clinic name, address, area, and contact number
• Working days and hours
• Doctor names, specializations, and availability

From patients (on booking):

• Full name
• Phone number (optional for walk-in bookings)
• Appointment details — date, slot, doctor, booking code

Automatically collected:

• Basic usage data via Firebase (page interactions, auth state)
• No cookies beyond what is required for authentication

3. How We Use Your Information

• Create and manage your clinic account
• Display your clinic's public booking page to patients
• Process and manage appointment bookings
• Allow clinic staff to manage their daily queue and patient follow-ups
• Communicate with you about your account if needed

We do not use your information for advertising. We do not sell your data to any third party.

4. Where Your Data Is Stored

All data is stored securely on Google Firebase (Firestore), hosted on Google Cloud infrastructure. Firebase complies with international data protection standards. By using Rylxo, you consent to your data being stored and processed on Google's infrastructure.

5. Who Can Access Your Data

• Clinic users can only access their own clinic's data
• Patients can only see publicly available clinic information and their own booking details
• Rylxo may access data for maintaining the platform, resolving support issues, or fixing technical problems
• No third parties have access to your data except Google Firebase as the infrastructure provider and MSG91 (for WhatsApp booking notifications) — MSG91 receives only the patient's phone number and appointment details required to deliver the notification

6. Data Retention

• Clinic account data is retained as long as the account is active
• Appointment data is retained to support clinic operations and follow-up scheduling
• If you request deletion, we will remove your data within 7 working days

7. Your Rights

As a user of Rylxo, you have the right to:

• Access the data we hold about you
• Correct inaccurate information
• Request deletion of your data at any time

To exercise any of these rights, email us at support@rylxo.in with your request. We will respond within 7 working days.

8. Patient Data and Clinic Responsibility

Clinics using Rylxo are responsible for informing their patients that appointment data is collected and stored digitally. Rylxo provides the platform — the clinic is the data controller for their patients' information.

9. Security

• Firebase Authentication for secure login
• Firestore security rules ensuring users can only access their own data
• HTTPS encryption on all data in transit

No system is completely secure. If you believe your account has been compromised, contact us immediately at support@rylxo.in.

10. Children's Privacy

Rylxo is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of Rylxo after changes means you accept the updated policy.

12. Contact

Rylxo

Email: support@rylxo.in

Platform: rylxo.in