Privacy Policy

Professional use only

Ruqelo is offered exclusively to licensed healthcare professionals. By using Ruqelo, you confirm that you completed the Clinical Responsibility Commitment at signup and agree to use the platform only within your professional competence.

No patient-identifiable data

You must not enter protected health information or any patient-identifiable data into Ruqelo — including patient names, medical record numbers, dates of birth, contact details, photographs that could identify a patient, or any other information that could identify an individual.

Ruqelo is not HIPAA-compliant and maintains no Business Associate Agreements. Ruqelo is not designed to receive, store, or process patient-identifiable information. Any entry of such data is a breach of our Terms of Service and is undertaken solely at your own risk and responsibility.

Use de-identified, synthetic, or otherwise non-identifiable clinical content only.

Account and usage data

When you create an account, we collect and store account identifiers (such as your email address and authentication provider user ID), subscription and trial usage counts, language and specialty preferences, and attestation that you accepted the Clinical Responsibility Commitment at signup.

This information is stored in our database to manage your account, enforce plan limits, and operate the service.

Clinical inputs and AI processing

Ruqelo delivers AI-generated outputs through third-party computational inference services operating under contractual data protection obligations, including standard contractual clauses where applicable. Inputs are processed transiently and are not retained beyond what is necessary to generate an immediate response.

Ruqelo is designed for de-identified, anonymised, or synthetic clinical inputs only. Users must remove direct identifiers and avoid rare combinations of details that could reasonably identify an individual. Depending on jurisdiction, context, and the possibility of re-identification, de-identified or pseudonymised clinical information may still be treated as personal data under applicable law. Ruqelo therefore requires users not to submit patient-identifiable information and processes clinical inputs only as necessary to generate the requested output, subject to the data-handling terms described in this policy.

Do not submit patient-identifiable data. Ruqelo does not warrant confidentiality of any patient-identifiable information you enter in breach of these requirements.

Session data and retention

Generated clinical outputs are produced in real time for your session. Ruqelo does not store patient-identifiable information from your clinical inputs. Conversation history and preferences you choose to save are associated with your account to provide continuity of service.

You may delete saved conversations from within the application. Account data is retained while your account remains active and as required for legal, billing, or security purposes.

Browser extensions

Ruqelo browser extensions (Klaero, Savori, Calc, Vision, Workspace, and the Corpelo Web Clipper) are optional Chrome extensions that call the same ruqelo.com services as the website. They do not add a separate data store.

When you sign in, Klaero, Savori, Calc, Vision, and Workspace pair your browser with your Ruqelo account as a device. The extension keeps its own device token on your device (a short-lived token in the extension's session storage and a refresh token in its local storage) so the panel can call ruqelo.com. Signing out revokes that device. The extensions do not read cookies. The Corpelo Web Clipper uses only a Corpelo connection code that you paste into the extension, stored in the extension's local storage on your device.

What you choose to send is handled under the rest of this policy. Klaero sends the rough notes you type, the specialty and format you select, and any file you attach, to generate a draft note. Savori sends the question you type or the page selection you clip, plus any file you attach. Calc sends the calculator values you enter. Vision sends the image you choose. The Corpelo Web Clipper sends the page title, page address, and selected text to your Corpelo library. Workspace opens the Workspace page and does not read the page you were on.

Generated outputs may be saved to your account when you are signed in, as described under "Session data and retention". Clinical text is sent to the AI sub-processors named in this policy only to produce the output you request. You must still use de-identified, synthetic, or otherwise non-identifiable content. The extensions are not a place to enter patient-identifiable data.

Payment processing

If you subscribe to a paid plan, payment details are processed by our payment provider. Ruqelo does not store full payment card numbers on its servers.

Security

We implement reasonable technical and organisational measures to protect account data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data we hold about you (such as your account email and preferences). Contact us using the options below to exercise these rights.

Google account data

When you choose to connect Google Calendar, Ruqelo requests the Google OAuth scope calendar.events. This permission is used solely to display your shift schedule alongside your Google Calendar and to create or update calendar events that you explicitly ask Ruqelo to create or update.

Ruqelo accesses calendar events only. Ruqelo does not request access to Gmail, Google Drive, Contacts, or other Google services.

Ruqelo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data obtained through this connection is never sold, never used for advertising, and never used to train generalised AI or machine learning models.

You can revoke Google Calendar access at any time through your Google Account permissions. Disconnecting stops further access; previously synced schedule data in Ruqelo remains subject to your account controls and this Privacy Policy.

Questions about Google account data handling: support@ruqelo.com.

AI sub-processors

Ruqelo sends clinical text to trusted AI infrastructure providers acting as our sub-processors under data-processing agreements, only to generate the output you request. Names, identification numbers, medical record numbers, dates of birth, and phone numbers are removed from patient text in those products before it is sent. The clinical content of the note is kept.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of Ruqelo after changes constitutes acceptance of the revised policy.

Contact

Questions about privacy or data handling? Email support@ruqelo.com, use Report a problem in the app, or visit Help & Support.