Skip to content

Drawer 08 · 10 answers

Trust & privacy

Roles, the log, where data is stored and the agreements.

  1. Roles and who sees what Who can see a visit's notes, and how do roles work? Five roles, each with its own key: owner, admin, doctor, front desk and billing. The front desk and billing never open a visit's notes; only the doctor whose visit it is writes and saves them, and another doctor's attempt to change it is refused and kept, with who tried. The owner opens every door, but writing notes stays with the doctors unless the owner is one of them. Live
  2. Where data is stored Where is my clinic's data stored? Your clinic's records are stored in Canada, backups too, encrypted on the way and at rest. Some services can involve processing outside Canada, such as delivering texts and emails, carrying video calls and running AI features; the privacy policy explains this. Live
  3. The log What does the log keep, and who can see it? Changes, exports, refusals and questions to the AI are each kept with who and when, and sign-ins too. Exporting the log goes on the log itself. Opening a visit is limited by role, but reading it is not itself written to the log. Live
  4. Cookies and tracking What cookies does Qlynic use, and is there tracking? Essential cookies keep you signed in, protect against request forgery and remember security state; preference cookies remember settings; first-party analytics show how the site is used. There are no third-party advertising networks, ad pixels or cross-site tracking, and analytics are never shared with advertisers. This assistant uses a cookie to remember your conversation until you start a new chat. Policy
  5. Who owns the data Who owns our clinic's data in Qlynic? Your clinic owns its data. Qlynic uses it only to run, secure, support and improve the service and to meet the law's requirements, and may use statistics that identify no one. The Privacy Policy commits that personal and health information is never sold, never used for advertising and never used to train AI models, and your data can be exported in common machine-readable formats. Policy
  6. Custodian and information manager Who is the custodian of patient records, and what is Arxeon's role under the Health Information Act? Your clinic and its physicians stay the custodians of health information. Arxeon is the clinic's information manager under section 66 of Alberta's Health Information Act, on the terms of the Information Manager Agreement in the subscriber agreement: it handles health information only to provide the service or on the clinic's instructions, and notifies the clinic of a confirmed breach within 72 hours. Policy
  7. Security reviews and privacy assessments Can you help with our privacy impact assessment? We don't publish certifications, approvals or audit status on the site. For your clinic's privacy impact assessment or a security questionnaire, the team provides what you need under the subscriber agreement; I can open a ticket for you. Meanwhile: records are stored in Canada, encrypted, and changes, exports and refusals are kept with who and when. Policy
  8. How long data is kept, and leaving How long is data kept, and what happens to it if we leave? While your clinic subscribes, its data stays. When the subscription ends, you have 60 days to ask for your clinic's data in common machine-readable formats; then it is deleted from live systems within 90 days, and backups are overwritten within a further 35 days, unless the law requires keeping it longer. Policy
  9. Sign-in security Does Qlynic have two-step sign-in and other sign-in protections? Two-step sign-in (a code by email) for anyone who turns it on. Repeated wrong passwords lock the account. Each person sees their recent sessions, with the device and when, and a new sign-in email is confirmed by a code sent to it. A patient locked out by a new phone number gets back in after the clinic checks their ID. Live
  10. The Terms, in short What are the key points of the Terms of Service? Opening an account requires being 18 or over, and a clinic account is run by or under a licensed health professional or organization. Qlynic is software that doesn't practise medicine and isn't for emergencies; clinicians review and stay responsible for clinical content. Subscriptions renew until cancelled, liability is capped at what the clinic paid in the previous 12 months, Alberta law applies, and material changes come with 30 days' notice. Policy

Still stuck?

Write to the desk.

Open a ticket on the support page, or email support@qlynic.com. Each ticket gets a reference code by email and is answered by email. The desk works weekdays, 8 AM to 6 PM Mountain Time, and aims to reply within six business hours.