Privacy Policy
Last updated: March 1, 2026
Never Sold
Your data is never sold or rented to any third party.
Fully Encrypted
All data encrypted in transit (TLS 1.2+) and at rest.
Clinic Isolated
Each clinic's data is completely isolated from others.
Your Data, Your Rights
Patients can access, correct or delete their records.
Plain English summary: We collect only what we need, we never sell your data, every clinic's data is completely isolated, and patient records are encrypted at rest and in transit. Your data belongs to you.
Information We Collect
We collect three categories of information:
Clinic registration data
Your name, email address, clinic name, and contact details when you register.
Patient data
Names, contact details, appointment history, and health records entered by clinic staff.
Technical data
IP addresses, browser type, and usage data collected automatically when you use the platform.
How We Use Your Information
We use the information we collect to:
Provide, operate and improve the Lokayoo platform.
Send appointment confirmations, OTP codes and system notifications.
Process payments and manage subscriptions.
Respond to support requests.
Comply with legal obligations.
Important: We do not use patient health data for any purpose other than delivering the clinic management services you have requested.
Data Isolation and Security
Your data is protected at every layer of the platform.
Clinic Isolation
Each clinic's data is completely separated — staff can only see their own clinic's records.
Encryption in Transit
All data transferred between your browser and our servers uses TLS 1.2+.
Encryption at Rest
Stored data is encrypted so it cannot be read without proper authorization.
Security Audits
We conduct regular security audits and follow healthcare data best practices.
Data Sharing
We do not sell your data. Ever.
We do not sell, trade or rent any personal data — including patient data — to third parties.
We may share data only in these limited circumstances:
With trusted service providers who help us operate the platform — only what is strictly necessary, under data processing agreements.
If required by law or to protect our legal rights.
Patient Data Rights
Patients whose data is stored on Lokayoo have the following rights:
Access
Request a copy of all records held about you.
Correction
Request updates to inaccurate or incomplete records.
Deletion
Request permanent deletion of your personal data.
Direct these requests to the clinic that collected your data. For further assistance, email privacy@lokayoo.com.
Data Retention
We retain clinic and patient data for as long as your subscription is active.
After cancellation
90 days
Data retained for export, then permanently deleted.
Early deletion
On request
Contact support anytime to delete your data early.
Cookies
We use essential cookies only — to maintain your session and keep you logged in.
✓ Session Cookies
Used to keep you logged in.
✗ No Tracking Cookies
We never use ad or tracking cookies.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice within the platform.
Your continued use of Lokayoo after such changes constitutes your acceptance of the updated policy.
Contact Us
For any questions about this Privacy Policy, contact our Data Privacy team at privacy@lokayoo.com.
Have a privacy concern?
Reach our Data Privacy team at privacy@lokayoo.com — we take every request seriously.
Email Privacy Team