1What stays on your device
Every facility you add (its name, type, size and service plan), every room, measurement, answer, note and evidence photo, your licensing checklist dates and notes, the "Prepared by" name, any partner branding you apply and your settings are stored only in ClinicReady's private storage on your phone. Reports and CSV exports are created on your phone and leave it only when you share them yourself, for example by email or to your files.
There is no account and no sign-up. We never receive your facilities, measurements or reports.
ClinicReady is a tool for facility owners, contractors and consultants. It does not ask for, and is not meant to hold, patient or health information. Please do not type patient details into notes, and avoid photos that show people.
If device backup is turned on, Android or iOS may include ClinicReady's data in your own Google or Apple backup. We cannot see that backup.
2ClinicReady's server
The app talks to one server of its own, clinicready-api, which runs on Cloudflare Workers. Every call is optional: the app works fully offline with the rules built into it. The server is used to:
- send app settings, such as ad limits and update notices, when the app starts;
- send updated rule packs (the DHA rules and the licensing checklist);
- look up a partner code you type in Settings, so a consultant's branding can be applied to your reports;
- check that you have a report or Pro, and pass AI checks to Anthropic (section 3).
The server stores nothing: it has no database or file storage, request logs are turned off, and it never logs request contents, images or IDs. Cloudflare, which hosts it, receives your IP address to deliver each request and to limit how many requests one address can make (rate limiting).
3AI plan reading and photo checks
ClinicReady has two optional AI features that come with a purchased report or Pro. They are switched on from our server; while they are off, nothing is sent.
- AI plan reading: you pick your layout as a PDF (the phone turns up to 3 pages into images) or as an image, or take a photo of it. The image is sent with the facility type, and the AI proposes a list of rooms with sizes.
- AI photo checks: one or two evidence photos of a room are sent with that room's checklist questions, and the AI proposes yes, no or unclear answers.
Your consent comes first. Before the first AI check, a consent screen tells you that plan images and photos are sent to Anthropic's Claude for analysis. Nothing is sent unless you tap "I agree". You can withdraw consent in Settings > Privacy and data, and the app asks again before the next AI check.
What is sent: only the images you choose for that check, the facility type or the room's checklist questions, and an anonymous purchase ID used to confirm that you have a report or Pro. Photo metadata, such as the time taken, camera details and any location your camera saved, is removed on your phone first. Facility names, notes and measurements are not sent.
Who processes it: the images travel over an encrypted connection to our server and on to Anthropic's Claude API, which processes them for us as a service provider and returns proposals. Our server does not store them. Anthropic states that it automatically deletes API inputs and outputs on its back end within 30 days of receipt or generation, unless a longer period is needed, for example to enforce its Usage Policy or to comply with the law (Anthropic: how long data is stored). Anthropic states that, by default, it does not use inputs or outputs from its commercial products, including the API, to train its models (Anthropic: model training). Its use of the data is governed by its Commercial Terms of Service.
You decide. Every AI answer is only a proposal. You confirm, correct or skip each room and each answer, and ClinicReady's own rules, not the AI, decide pass or fail.
4Camera, photos and files
- Camera: used only when you take a photo, through your phone's own camera screen.
- Photos and files: chosen through your phone's photo picker or file picker, so ClinicReady sees only the items you pick, never your whole library or folders.
- Evidence photos are resized and kept in ClinicReady's private storage. They are not printed in reports and leave your phone only for an AI photo check you start.
- Location: ClinicReady never reads your location.
5Advertising
Free users see ads from Google AdMob on the facility list and in the free tools, never on room cards, results or reports. Users with Pro, or who bought a report in the last 60 days, see no ads.
- Google may collect your device's advertising ID, your IP address (which can show your approximate location), ad interactions and diagnostic data to show, measure and protect ads.
- In the EEA, the UK and Switzerland, Google's consent form asks for your choices before any ad is requested. You can change them in Settings > Ad privacy choices.
- On iPhone, ads use your advertising identifier only if you allow tracking in Apple's App Tracking Transparency prompt.
6Purchases
Google Play or the Apple App Store handle payment; we never receive card details. We use RevenueCat to confirm what you have bought and keep Pro working. RevenueCat receives your purchase history and a random app user ID that is not linked to your name or email. When you start an AI check, our server sends that random ID to RevenueCat to confirm the purchase, and does not keep it.
7Third parties
These companies may process data in the United States and other countries. Anthropic, RevenueCat and Cloudflare act as our service providers.
8How long data is kept
- On your phone: until you delete it in the app or uninstall the app.
- Our server: nothing is kept; each request is handled in memory and discarded.
- AI images: deleted by Anthropic within 30 days, except as its policy describes (section 3).
- Google, Apple, RevenueCat and Cloudflare: under their own policies, linked above.
9Your rights and choices
Depending on where you live, for example under the UAE Personal Data Protection Law or the EU and UK GDPR, you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to withdraw consent. Because your data lives on your phone, you can do most of this yourself:
- See and edit everything in the app; share reports and, with Pro, CSV exports.
- Withdraw AI consent in Settings > Privacy and data.
- Change ad consent in Settings > Ad privacy choices (where shown), turn off tracking on iPhone, or reset your advertising ID in your phone's settings. Pro removes ads while it is active, and buying a report removes them for 60 days.
- For anything we can help with, such as the purchase record RevenueCat keeps, email mumshadjawad3333@gmail.com. We reply within 30 days. You can also complain to your local data protection authority.
10Deleting your data
Settings > Delete all data removes every facility, room, answer, photo and checklist entry from your phone. Uninstalling the app removes everything it stored. We hold nothing about you on our server, so there is nothing more to delete there. To have your RevenueCat purchase record deleted, email us your Google Play or App Store order number. Purchases themselves stay with your store account, and Google and Apple keep their own records.
11Children
ClinicReady is a professional tool for adults. It is not directed at children, and we do not knowingly collect data from children under 13.
12Security and changes
All connections use HTTPS. Data on your phone is kept in the app's private storage and protected by your phone's own security, such as its screen lock and device encryption. We will update this policy, and the effective date above, before ClinicReady sends any new kind of data off your phone.