Last updated: 21 October 2026
This policy explains how WorkflowCraft Clinic ("the app"), provided by WorkflowCraft, a sole proprietorship of Dhvani Zaveri, Borivali, Mumbai, India ("we", "us"), handles information. Contact: workflowcraft17@gmail.com.
Your clinic's records (patients, visits, photos, fees) are stored only in your own Google account: in Google Sheets, Google Drive and, if you turn it on, Google Calendar.
We do not run our own servers or databases for your records. We do not receive, store, read, sell or share your patients' information.
The only information we keep about you is what we need to give you a licence: your clinic's name, the Google account email you use with the app, your plan and its dates, and your contact details for support and billing.
The app runs inside your Google account and uses Google data only to provide its features to you:
Your email address: to identify your account and check your licence.
Google Sheets: to read and write your clinic's data sheet (patients, visits, fees, settings).
Google Drive (only files and folders created by the app): to store photos, visit and discharge PDFs, reports and backups. The app cannot see other files in your Drive.
Google Calendar (optional): to add, update or remove the next-appointment entries the app creates.
Sending email: to send you, and only you, a daily reminder email.
Background tasks: to run your weekly backup and daily reminder.
WorkflowCraft Clinic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
Google user data is used only to provide and improve the app's features that you use.
It is not transferred to anyone, except as needed to provide those features, to comply with law, or as part of a merger or sale with your notice.
It is never used for advertising, never sold, and never used to train AI or machine-learning models.
No person at WorkflowCraft reads your data, unless you ask us to help with a specific problem and give permission, or the law requires it.
Your clinic is the "Data Fiduciary" for patient information. Your clinic decides what to record, why, and for how long, and is responsible for: giving patients notice and obtaining their consent; getting a parent's or guardian's verifiable consent for patients under 18; answering patients' requests to access, correct or erase their information; keeping medical records for as long as the law requires; and reporting any personal data breach as the law requires.
WorkflowCraft does not hold patient information. The app stores it in your Google account, and we do not have access to it. If you ask us for support and give us access to specific information, we act only on your instructions and only for that request (as a "Data Processor").
Where data is stored: your records are stored by Google as part of your Google account, on Google's servers, which may be in India or other countries, under Google's own terms and security.
Patients who want to see, correct or delete their information should contact their clinic directly.
When you choose to send a message, PDF or photos on WhatsApp, the app hands them to WhatsApp on your device. What happens after that is governed by WhatsApp's own privacy policy.
Your records are protected by your Google account's security. Please use a strong password, turn on 2-step verification, keep your devices locked, and never share your Google password. We recommend keeping your weekly backups. If we ever learn of a problem in the app that could affect your information, we will tell you promptly.
Your clinic's records stay in your Google account for as long as you keep them. You can delete them at any time.
To stop the app, remove its access at myaccount.google.com/permissions. Your records stay with you.
We keep licence and billing details for as long as you are a customer, and afterwards only as long as the law requires (for example, for tax records).
The app is meant for use by clinics and healthcare professionals, not by children. Patient records about children are entered and controlled by the clinic.
If we change this policy, we will update the date above and, for important changes, tell customers by email.
For questions, requests or complaints about privacy, contact our Grievance Officer: Dhvani Zaveri, WorkflowCraft, Borivali, Mumbai, India · workflowcraft17@gmail.com. We will acknowledge your message within 48 hours and aim to resolve it within 30 days.