Privacy Policy

Last updated: 23 August 2026

Clineum is operated by Globotech Solutions, Karachi, Pakistan ("we", "us"). This policy explains what information we collect from nursing colleges, their staff, students, and parents/guardians who use the Clineum platform, and how we use, store, and protect it.

1. Information we collect

On behalf of the nursing college (the "institution") that licenses Clineum, we process:

Student records: name, enrollment number, contact details, date of birth, gender, address, guardian/parent contact information
Academic data: attendance, exam results, grades, clinical rotation hours, uploaded documents
Financial data: fee challans, payment status, transaction references (we do not store full payment card or wallet credentials — payments are processed directly by JazzCash and Easypaisa)
Staff and faculty records: name, role, designation, qualification, contact details
Usage data: login activity, audit logs of actions taken within the platform

We do not collect or store patient health information (PHI) relating to any hospital patient a student may encounter during a clinical rotation. Any patient identifiers referenced in clinical logs are one-way hashed before storage.

2. How we use this information

To operate the core functions of the platform: attendance tracking, fee management, examinations, clinical rotation logging, and academic reporting
To send SMS, WhatsApp, and email notifications the institution or a parent/guardian has requested (fee reminders, exam results, attendance digests)
To generate compliance reports requested by the institution, including Pakistan Nursing Council (PNC) audit summaries
To issue and verify blockchain-based academic credentials via the Cardano Veridian network, where the institution has enabled this feature
To improve platform reliability, including automated error monitoring

3. Third-party service providers

We share data with the following processors, only as needed to deliver the service:

Supabase — database hosting (AWS Bahrain, me-south-1 region)
JazzCash / Easypaisa — fee payment processing
Telenor / Jazz SMS gateways — SMS delivery
Meta (WhatsApp Business API via 360dialog) — WhatsApp message delivery
Anthropic — AI-assisted exam question generation and academic insights (institution-initiated only)
Resend — transactional email delivery
Cardano Foundation Veridian — blockchain credential issuance and verification, where enabled
Sentry — error monitoring (technical diagnostic data only, not academic or financial records)

4. Data retention

Academic and financial records are retained for the duration of the institution's subscription and for a reasonable period afterward to satisfy regulatory and audit obligations. An institution may request deletion of its data by contacting us, subject to any legal retention requirements (e.g. PNC recordkeeping rules).

5. Data security

Data is encrypted at rest and in transit (TLS 1.3). Sensitive fields (CNIC numbers, bank details, payment gateway credentials) are additionally encrypted at the application layer. Access to student and financial data is restricted by role-based access control, and every tenant institution's data is isolated from every other institution's data at the database level.

6. Your rights

Students, parents, and staff may request access to, correction of, or deletion of their personal data by contacting their institution's administrator, who can action the request within Clineum, or by contacting us directly at the address below.

7. Contact

Globotech Solutions, Karachi, Pakistan
For privacy inquiries, contact your institution's Clineum administrator, or reach us via the contact details provided in your institution's onboarding agreement.

This document is a draft template and has not yet been reviewed by legal counsel. It should be reviewed and finalized before being relied upon as a binding privacy policy.