Privacy Policy — Klinik Alanna

Effective: 24 June 2026 · Last updated: 24 June 2026

This Privacy Policy explains how Klinik Alanna ("we", "us", the "Clinic") collects, uses, discloses and protects your personal information when you use the Klinik Alanna mobile application and related services (the "App"). We are committed to protecting your privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By using the App, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.

1. Who We Are (Data Controller)

Klinik Alanna is a general practice clinic and acts as the data controller for personal information collected through the App.

Address: No 6 (Ground Floor), Jalan Setia Utara 3, Bandar Setia Fontaines, 13200 Kepala Batas, Penang.
Phone / WhatsApp: 011-2621 0612
Privacy email: privasi@klinik-alanna.my

2. Information We Collect

We collect the following information:

Account & identity information. When you sign in with Google Sign-In — or Sign in with Apple once the iOS app is available — we receive your name, email address and account identifier. If you choose Apple's "Hide My Email" feature, we receive a private relay email address instead of your real email. If you use a passkey, we store that passkey's public credential. We do not store your password.
Patient & dependent profiles. Name, date of birth, gender, height, and contact details (email/phone) for yourself and any dependents (for example a child or family member) you manage in the App.
Health data. Health readings and records that you or the clinic enter — for example blood pressure, blood glucose, weight and other metrics, along with notes, timestamps, and the source of the record (entered by the patient or by the clinic). Health data is considered sensitive personal data under the PDPA.
Device information for notifications. A push notification token (FCM), platform type (Android/iOS) and app version, to enable us to send push notifications.
Technical & log data. Basic technical information such as IP address, access times and error logs generated automatically by our servers for security and operational purposes.

3. How We Use Information

To provide, operate and maintain the App and your account.
To let you record, view and track health information for yourself and your dependents.
To enable the clinic team to manage patient records and provide appropriate care.
To send care-related notifications, reminders and clinic announcements.
To verify your identity and keep your account secure (sign-in, passkeys).
To comply with applicable legal and regulatory obligations.

4. Legal Basis & Consent

We process your personal information based on your consent and for the purpose of providing healthcare services. As health data is sensitive personal data, we process it only with your explicit consent. You may withdraw consent at any time (see Section 9), though this may limit your ability to use some or all of the App.

5. Sharing & Disclosure of Information

We do not sell your personal information. We share information only in the following circumstances:

Service providers (data processors). We use Google Sign-In (and Sign in with Apple once the iOS app is available) for sign-in authentication, and Google Firebase Cloud Messaging to deliver push notifications. These providers process limited data (such as device tokens) on our behalf.
Within the clinic. Authorised clinic staff (doctors and staff) may access patient records for care purposes.
Legal requirements. Where required by law, court order, or a lawful authority.

6. Dependents & Children

The App lets you manage dependent profiles, which may include children. By adding a dependent, you confirm that you have the legal authority (as a parent or legal guardian) to provide their information and consent to its processing on their behalf. Children should not use the App independently without parental or guardian supervision.

7. Data Storage & Retention

We retain your personal information and health records for as long as necessary to provide the services, and in line with the medical-record retention periods required by law and professional guidelines in Malaysia. When no longer needed, information is securely deleted or anonymised.

8. Data Security

We implement reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS/TLS), secure authentication via passkeys and tokens, and role-based access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights Under the PDPA

Subject to applicable law, you have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Withdraw your consent to the processing of your information.
Limit or object to certain processing.
Request deletion of your information, subject to legal retention obligations.

To exercise any of these rights, please contact us using the details in Section 11.

10. Notifications & Third-Party Links

You can control push notifications through your device settings or by signing out of the App. The App may contain links to or rely on third-party services (such as Google or Apple); your use of those services is subject to their own privacy policies.

11. Contact Us

If you have any questions, concerns or requests relating to this privacy policy or your personal information, please contact:

Klinik Alanna
No 6 (Ground Floor), Jalan Setia Utara 3, Bandar Setia Fontaines, 13200 Kepala Batas, Penang
Phone / WhatsApp: 011-2621 0612
Email: privasi@klinik-alanna.my

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.