Privacy Policy

Last updated 8 August 2026

This Privacy Policy explains how Neural Healthcare Solutions Private Limited, operating under the brand names Klyient.ai and KlyientAI ("we", "us", "our"), collects, uses, shares, and protects information when you use our website, our practice platform for dental clinics, and the KlyientAI mobile app. We follow the principles of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and apply reasonable security practices consistent with the Information Technology Act, 2000.

1. Who we are

Klyient.ai is a brand of Neural Healthcare Solutions Private Limited, an Indian healthcare practice-growth company. We provide (a) patient acquisition and communication services for dental clinics, including AI-assisted messaging, and (b) a practice platform, delivered on the web and through the KlyientAI mobile app, that clinics use to manage appointments, patient records, treatment plans, and billing.

2. Data we handle, and in what role

(a) Visitor data. If you use our website or request a demo we may collect your contact details and standard usage data (IP address, browser and device information). For this data we act as a Data Fiduciary under the DPDP Act.

(b) Clinic data. For clinics using our services we hold the clinic's name, address, staff contact details, login credentials, and billing information. We act as a Data Fiduciary for this information.

(c) Patient data. Clinics record patient information on our platform: demographic and contact details, appointment history, clinical notes, prescriptions, treatment plans, invoices, feedback, photographs and documents (such as x-rays) attached to visits, and WhatsApp or telephone conversations between the patient and the clinic. For patient data, the clinic is the Data Fiduciary and Klyient.ai acts as a Data Processor. We process patient data only to deliver the services the clinic has engaged us for, and ownership of patient data remains with the clinic. Patients should direct privacy requests about their records to their clinic.

3. The KlyientAI mobile app

The app is used by clinic staff, not by patients. In addition to the platform data above:

• Camera and photo library. The app requests camera and photo access so clinic staff can photograph or attach documents (for example x-rays, scans, or reports) to a patient's visit. Images are uploaded to secure cloud storage and are accessible only to that clinic. The app never accesses your photos in the background.
• Crash and diagnostics data. If the app encounters an error, technical crash data (device model, OS version, app version, and the technical details of the failure) is sent to Sentry, our crash-reporting provider. Crash reports are configured to exclude patient information and personal identifiers.
• App updates. The app periodically checks Expo's update service to fetch improvements. This involves standard network metadata only.

4. AI-assisted communication

Clinics on our platform can use an AI assistant that helps respond to patient enquiries on WhatsApp and by phone. Message content is processed by our AI provider (Anthropic) to generate responses on the clinic's behalf. These providers process data as our sub-processors and do not use it to train their models under the terms we engage them on. Conversations are stored on our platform so the clinic can review them.

5. How we use information

• To provide, operate, secure, and improve the services.
• To help clinics schedule appointments, maintain records, and communicate with their patients.
• To respond to demo requests and support queries.
• To comply with legal obligations and respond to lawful requests from public authorities.

We do not sell personal data. We do not share data with third parties for their own marketing purposes.

6. Third parties we work with

• Hosting and infrastructure: Railway (application hosting), Amazon Web Services (file and image storage).
• Messaging and telephony: Gupshup and Meta (WhatsApp Business messaging), Exotel (telephony and call recording).
• AI processing: Anthropic (AI-assisted replies), speech-to-text providers for voice calls.
• App services: Sentry (crash reporting), Expo (app updates), Google Maps (location and address resolution).
• Advertising platforms: Google Ads and Meta Ads, only where we manage campaigns on a clinic's behalf.

7. Where data is stored

Platform data is stored with our hosting providers, in Indian regions where practical. Some providers may process information outside India; in those cases appropriate contractual safeguards are in place.

8. Your rights

Subject to the DPDP Act and applicable law, you may request access to, correction of, or deletion of your personal data, receive a copy in a portable format, withdraw consent, and lodge a grievance with our grievance officer. For patient records held by a clinic on our platform, exercise these rights with your clinic, which is the Data Fiduciary. Clinics can request data export or account deletion by contacting us using the details below.

9. Security

We use encryption in transit (HTTPS), access controls, least-privilege database access, and audit logging for sensitive operations. Medical documents are stored in private cloud storage and served through expiring, signed links. No system is perfectly secure; if a personal-data breach affecting you is detected, we will notify you without undue delay.

10. Retention

We retain information only as long as needed to provide the services and meet legal obligations. On termination, clinic and patient data is made available for export for 30 days and then deleted from active systems. Archived backups are rotated out within 90 days.

11. Children

Our services are intended for healthcare practices and the adults operating them. Patient records may include minors, but these are always created and managed by the clinic, as Data Fiduciary, under its own consent framework.

12. Changes

We may update this policy from time to time. Material changes will be announced to registered clients, and the "Last updated" date above will change. Continued use after a change takes effect constitutes acceptance.

13. Contact and grievance officer

Questions, requests, or grievances: contact Dhruv Khatkar on WhatsApp or phone at +91 79829 02103. We respond within 7 working days.