1. Scope and identity
This policy applies to the Clinic OS healthcare operations platform, the IRIS assistant and associated demonstrations or services provided by Infinity Apps S.A., a company legally incorporated and registered in the Republic of Panama, operating under the Infinity Apps brand (together, the “Services”). Infinity Apps S.A. is the identified provider and primary privacy contact for its Services at contact@infinityapps.tech. Its jurisdiction of incorporation and registration is the Republic of Panama. For privacy enquiries, users may contact contact@infinityapps.tech. Any additional statutory contact details required for a particular service or jurisdiction will be provided through the applicable customer documentation.
A participating clinic or healthcare organization may determine why patient and medical-operational data are used; depending on the agreement and applicable law, Infinity Apps S.A. may act as its service provider or data processor. This policy does not replace the clinic's own notices to patients.
2. Information involved in the Services
- Users and personnel: names, work email addresses, account identifiers, professional roles, clinic affiliations and login-related information.
- Scheduling: doctor availability, scheduling rules, appointment dates and times, clinic locations and appointment contact details provided by a user or clinic.
- Google authorization and calendars: linked account identifiers, authorized calendar identifiers, encrypted credentials used for continued authorized access, availability information and event data needed for scheduling operations.
- IRIS interactions, where enabled: content of appointment-related conversations and operational metadata; voice recordings or transcripts may be handled by the configured voice service and clinic under applicable notice and consent requirements.
- Technical and security records: access, performance and diagnostic records needed for reliable service delivery and protection against abuse.
Clinic OS is intended to minimize sensitive personal information placed into calendar entries, messages or technical logs. Clients must not submit unnecessary health or identity details.
3. Google account information and Google Calendar permission
When a user chooses Google Sign-In, available basic identity details such as an email address and account name may be used for account identification and authentication, according to the permissions actually granted. Collection of a work email address for authentication, communications or appointment notices is not permission to read incoming or outgoing Gmail messages. The Calendar permission shown for this application does not authorize reading a Gmail inbox or message contents.
For Google Calendar connections, the currently declared OAuth permission is https://www.googleapis.com/auth/calendar. Google's description of this broad scope covers viewing, editing, sharing and permanently deleting accessible calendars. The intended Clinic OS features are narrower: checking authorized availability, creating or updating appointment events and handling cancellations or corrections when instructed and enabled. We do not use this integration to browse users' calendars for unrelated purposes, share entire calendars with unrelated parties, or erase calendars as an unrelated operation.
Google Calendar information is accessed only for user-facing calendar and appointment features that the authorizing user and clinic have enabled. Calendar information may include free/busy status and specific event details needed for those features. We request consent through Google's authorization screen and do not claim authorization beyond the permissions actually granted.
4. Purposes of use
Information may be used to authenticate authorized users, coordinate clinical scheduling, avoid conflicting appointments, maintain requested calendar events, deliver authorized notifications, enable IRIS appointment workflows, provide support, investigate incidents and maintain the security and reliability of the Services. Uses requiring a different purpose or wider permissions must be disclosed and authorized before they begin.
Google user data is not sold, used for advertising or creditworthiness decisions, or used to train general-purpose AI models. Access by personnel is limited to appropriate support, security, legal or user-authorized purposes consistent with Google's API Services User Data Policy.
5. Storage, service providers and international processing
Where configured, the Services use cloud infrastructure and databases, including Google Cloud services and Supabase. Encrypted OAuth refresh tokens may be stored for the connected calendar while authorization is needed. Voice-assistant workflows may involve a configured external voice/AI provider, including Retell AI, and notifications may involve email or web-push infrastructure. The actual providers and data flows used for a clinic depend on its enabled deployment and contractual terms.
These services can process information across jurisdictions. When required, applicable agreements, authorized access controls and appropriate contractual or legal safeguards are used. Sensitive clinical data should not be exposed to optional services without a validated lawful basis and the clinic's authorization.
6. Retention and deletion
Scheduling and account information is maintained for as long as reasonably necessary to provide the requested service, protect its integrity and meet applicable contractual or legal requirements. Linked Google authorization information is needed only while an authorized calendar integration is maintained; revocation can make further access impossible. Some appointment entries also exist independently in the user's Google Calendar and are controlled through Google Calendar.
For disconnection, requests to access, correct or delete information, or questions about applicable retention periods, contact contact@infinityapps.tech. Requests are handled subject to identity verification, clinic instructions, applicable law, contractual retention requirements and legitimate security records. Specific deletion periods and backup lifecycle commitments must be established in the applicable customer agreement before processing real patient information.
7. Security
The Services are designed to use controlled service identities, access restrictions, transport protection, and encrypted storage of Google refresh tokens. No Internet-based service can promise absolute security. Data incidents are assessed and handled according to contractual obligations and applicable law. Customers remain responsible for selecting appropriate user permissions, protecting their credentials and providing necessary notices to patients.
8. User choices, Google revocation and communications
Google Calendar access is optional but is required for features that depend on that connection. Users can review or revoke the application's Google authorization from Google Account connections. Revocation may interrupt availability and appointment synchronization; requests to remove stored connection data can be sent to the contact address above.
Clinic OS may use contact email addresses supplied by users or clinics to send permitted operational messages such as appointment confirmations and service communications. This does not entail reading a Gmail mailbox. Marketing messages, where used, require the consent or other legal basis applicable to that communication.
9. Patient information, automated assistance and consent
IRIS assists with administrative scheduling and communication. It is not a substitute for medical professionals and is not represented as a diagnostic or emergency-response service. If a clinic enables voice recordings, transcripts or patient-specific integrations, appropriate advance notice, consent or other lawful grounds, retention rules and provider agreements must be determined before live use.
10. Google API Services User Data Policy
Use and transfer of information received from Google APIs are subject to the Google API Services User Data Policy, including applicable Limited Use requirements. Information obtained through Google APIs is used only for permitted, disclosed service functionality and permitted security or legal purposes. We do not sell Google API user data, transfer it for advertising, or allow unauthorized personnel to inspect it.
11. Changes and contact
We may update this policy when features, data handling or laws change. Material changes affecting Google user data must be disclosed and, where necessary, require renewed user consent before a new use begins. Contact: contact@infinityapps.tech.