Who processes data
Ruqelo uses these categories of processors. AI processing is described by category. This page does not name an AI engine.
Authentication
Account identifier, email address, and sign-in session.
Kept while the account exists, then deleted with the account.
Database and file hosting
Account rows, conversations, notes, files, and sync records you save.
Kept while the account exists. Deleted with the account. Short-lived backups are overwritten on the normal backup cycle.
AI processing
The text, audio, or image you submit, sent to third-party AI service providers to generate an answer, a transcript, or an image read.
Processed to produce the response you asked for. Ruqelo does not use that content to train a model.
Speech transcription
Audio you record for a transcript, sent to a third-party speech service.
Processed to produce the transcript, then not kept by Ruqelo as a separate audio store beyond the transcript you save.
Payments
Plan, customer id, and subscription status for a web payment. The app uses the store for digital plans.
The payment processor may keep records it needs for tax, refunds, and fraud after the Ruqelo customer is deleted.
Email address and the message you send to support or that you opt in to receive.
Kept for the message thread or until you unsubscribe, then deleted with the account where it is stored on Ruqelo.
Web hosting
Request logs needed to serve the site, without clinical text in the public health check.
Kept for a short operational window, then overwritten.
Analytics and advertising measurement
Page measurement and advertising measurement, only after you accept cookies.
Not loaded before consent. Subject to the cookie choice you can change later.
Account deletion removes Ruqelo profile data, files, and the sign-in as part of that request, cancels a web subscription, and deletes the web payment customer. A failed step is retried. App Store and Google Play subscriptions stay until you cancel them in the store. Audit rows are kept with the identifier removed.
Processors may store data outside your country, including in the United States. Transfers rely on the contracts in place with those processors.
Questions: support@ruqelo.com.
Last updated: November 2026
Professional use only
Ruqelo is offered exclusively to licensed healthcare professionals. By using Ruqelo, you confirm that you completed the Clinical Responsibility Commitment at signup and agree to use the platform only within your professional competence.
No patient-identifiable data
You must not enter protected health information or any patient-identifiable data into Ruqelo — including patient names, medical record numbers, dates of birth, contact details, photographs that could identify a patient, or any other information that could identify an individual.
Ruqelo is not HIPAA-compliant and maintains no Business Associate Agreements. Ruqelo is not designed to receive, store, or process patient-identifiable information. Any entry of such data is a breach of our Terms of Service and is undertaken solely at your own risk and responsibility.
Use de-identified, synthetic, or otherwise non-identifiable clinical content only.
Account and usage data
When you create an account, we collect and store account identifiers (such as your email address and authentication provider user ID), subscription and trial usage counts, language and specialty preferences, and attestation that you accepted the Clinical Responsibility Commitment at signup.
This information is stored in our database to manage your account, enforce plan limits, and operate the service.
Clinical inputs and AI processing
Ruqelo delivers AI-generated outputs through third-party computational inference services operating under contractual data protection obligations, including standard contractual clauses where applicable. Inputs are processed transiently and are not retained beyond what is necessary to generate an immediate response.
Ruqelo is designed for de-identified, anonymised, or synthetic clinical inputs only. Users must remove direct identifiers and avoid rare combinations of details that could reasonably identify an individual. Depending on jurisdiction, context, and the possibility of re-identification, de-identified or pseudonymised clinical information may still be treated as personal data under applicable law. Ruqelo therefore requires users not to submit patient-identifiable information and processes clinical inputs only as necessary to generate the requested output, subject to the data-handling terms described in this policy.
Do not submit patient-identifiable data. Ruqelo does not warrant confidentiality of any patient-identifiable information you enter in breach of these requirements.
Session data and retention
Generated clinical outputs are produced in real time for your session. Ruqelo does not store patient-identifiable information from your clinical inputs. Conversation history and preferences you choose to save are associated with your account to provide continuity of service.
You may delete saved conversations from within the application. Account data is retained while your account remains active and as required for legal, billing, or security purposes.
Browser extensions
Ruqelo browser extensions (Klaero, Savori, Calc, Vision, Workspace, and the Corpelo Web Clipper) are optional Chrome extensions that call the same ruqelo.com services as the website. They do not add a separate data store.
When you sign in, Klaero, Savori, Calc, Vision, and Workspace pair your browser with your Ruqelo account as a device. The extension keeps its own device token on your device (a short-lived token in the extension's session storage and a refresh token in its local storage) so the panel can call ruqelo.com. Signing out revokes that device. The extensions do not read cookies. The Corpelo Web Clipper uses only a Corpelo connection code that you paste into the extension, stored in the extension's local storage on your device.
What you choose to send is handled under the rest of this policy. Klaero sends the rough notes you type, the specialty and format you select, and any file you attach, to generate a draft note. Savori sends the question you type or the page selection you clip, plus any file you attach. Calc sends the calculator values you enter. Vision sends the image you choose. The Corpelo Web Clipper sends the page title, page address, and selected text to your Corpelo library. Workspace opens the Workspace page and does not read the page you were on.
Generated outputs may be saved to your account when you are signed in, as described under "Session data and retention". Clinical text is sent to third-party AI service providers, described by category in this policy, only to produce the output you request. You must still use de-identified, synthetic, or otherwise non-identifiable content. The extensions are not a place to enter patient-identifiable data.
Payment processing
If you subscribe to a paid plan, payment details are processed by our payment provider. Ruqelo does not store full payment card numbers on its servers.
Security
We implement reasonable technical and organisational measures to protect account data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, or delete personal data we hold about you (such as your account email and preferences). Contact us using the options below to exercise these rights.
Google account data
When you choose to connect Google Calendar, Ruqelo requests the Google OAuth scope calendar.events. This permission is used solely to display your shift schedule alongside your Google Calendar and to create or update calendar events that you explicitly ask Ruqelo to create or update.
Ruqelo accesses calendar events only. Ruqelo does not request access to Gmail, Google Drive, Contacts, or other Google services.
Ruqelo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data obtained through this connection is never sold, never used for advertising, and never used to train generalised AI or machine learning models.
You can revoke Google Calendar access at any time through your Google Account permissions. Disconnecting stops further access; previously synced schedule data in Ruqelo remains subject to your account controls and this Privacy Policy.
Questions about Google account data handling: support@ruqelo.com.
AI sub-processors
Ruqelo sends clinical text to third-party AI service providers acting as our sub-processors under data-processing agreements, only to generate the output you request. In the clinical products, names, identification numbers, medical record numbers, dates of birth, and phone numbers are removed from patient text before it is sent. The clinical content of the note is kept.
Ruqelo AI beta
In the beta at ai.ruqelo.com, chat text is processed by Ruqelo's own AI model, run on cloud AI infrastructure provided to Ruqelo under a data-processing agreement, or by the third-party AI service providers described above. Beta chats are stored in the user's account until the user deletes them or deletes their account. Unlike the clinical products, names and identifiers are not automatically removed from beta chat text, so users must not enter patient identifiers. Only search queries are stripped of ID numbers, dates, phone numbers, and emails before they leave Ruqelo's servers.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of Ruqelo after changes constitutes acceptance of the revised policy.
Contact
Questions about privacy or data handling? Email support@ruqelo.com, use Report a problem in the app, or visit Help & Support.
Related documents: Trust Centre · Terms of Service · Security & Data Handling · Help & Support