1Data we collect
We collect the data required to operate a clinic inside the system: account, clinic, team, patient, appointment, billing, inventory, and WhatsApp settings.
- Account-owner data: name, email address, and contact channels.
- Clinic data: name, address, working hours, doctors, staff, and permissions.
- Patient data: name, phone, appointments, invoices, medical notes, and uploaded files when you use those features.
- Limited technical data such as browser type, IP address, and security logs to improve operations and prevent abuse.
2How we use data
We use data to operate the service, display reports, send reminders, improve performance, support users, and comply with legal requirements when necessary.
- Manage appointments, patients, billing, analytics, inventory, and marketing.
- Send WhatsApp messages on behalf of the clinic when the feature is enabled.
- Tailor the user experience to language, currency, country, and permissions.
- Diagnose errors and protect accounts against unauthorised access.
3Security and data isolation
Modirify is built so that each clinic has an independent data workspace. One clinic's data is not visible to another, and permissions define what each staff member can access.
- We use database-level isolation policies (Row-Level Security) where available.
- We use HTTPS/TLS to protect traffic between the browser and our servers.
- We review staff permissions and tie them to in-app screens and functions.
- We limit internal access to clinic data to what is operationally and technically necessary.
4Service providers
We use trusted service providers to operate the system. We share only the minimum data required for each function.
- Supabase: authentication, database, and storage.
- Microsoft Clarity: we use session replay on the public website, sign-up and sign-in screens, and inside the web and Android apps to understand navigation and improve the experience, hiding everything typed in forms and masking sensitive text, images and links before upload, with technical account and clinic identifiers instead of email addresses or patient names and a visitor identifier stored in first-party Clarity cookies on the website and inside the Android app to connect visits without Microsoft advertising synchronization while respecting Do Not Track and Global Privacy Control; Microsoft receives masked usage data and network information such as IP address and browser type under its privacy statement. We also store recording starts in our database using only the account identifier, workspace type (live or training), and time to show session counts to platform administrators.
- Cloudflare: hosting, CDN, protection, and Workers.
- Meta / WhatsApp Business: sending and receiving WhatsApp messages when the integration is enabled.
- Meta and TikTok: we share marketing-page visits, clicks on contact channels and store links, and website signups with them to measure the performance of our ads, together with technical data such as the IP address, browser type and the ad click identifier when present. At signup we also send your email address after hashing it for matching. We never send patient data, medical files or invoices.
- AI providers: for marketing content generation or smart assistants when you use those features, with sensitive data minimised wherever possible.
- YouTube / Vimeo: playing an embedded help or announcement video after you choose to load it; the provider receives the normal network request needed to stream the video.
We do not sell clinic or patient data to any third party.
5Cookies and local storage
The application may use cookies or local storage to retain session, language, UI preferences, and improve the experience.
The site's public pages use Meta advertising cookies to measure the performance of our ads. They last 90 days, and you can delete them in your browser settings without affecting your use of the service.
The site remembers your market preference in localStorage under the key modirify-country to show the relevant market in navigation and app entry links; this preference contains no personal data.
The site also keeps a local acquisition record linking signup to its source: a random visitor identifier, landing page, referring domain, campaign information and click identifiers when present in the URL. This source record does not contain a patient's name or medical files. The device record expires 90 days after its last update; source context may be attached to signup for acquisition analysis within the service. This period applies to the device record, not to deletion of all account records.
6Data retention and deletion
While your account is active we retain your clinic records: patients, appointments, invoices, inventory, and uploaded files. These records are the clinic's medical and financial archive, so we do not delete them automatically over time.
Operational logs do have fixed retention periods, applied automatically, after which they are deleted:
- Audit log: 12 months.
- In-app activity log: 90 days.
- AI assistant conversations: 90 days.
- Message and reminder logs: 90 days.
- Internal clinic-room messages: 30 days.
- Social account messages: 180 days.
When you request account deletion: we delete the account and everything tied to it: clinic data, staff, patients, appointments, invoices, inventory, files held in storage, and audit-log copies. We do not merely deactivate or hide the account.
Active data is deleted within 30 days after identity and account ownership are verified. An isolated copy may remain in backups or archived logs until the applicable retention cycle ends and is not used to operate the service during that period.
7Your rights and contact
You may request access to your data, corrections, or deletion based on the case and applicable law. To delete your data see the data deletion page.
Modirify is operated by Quiet Nest LLC, a company registered in Montana, United States. For service or privacy inquiries, contact support@modirify.com.