Privacy policy

Last updated: 17 October 2026

vorClinic is clinic management software for doctors and their staff, available for Windows, Android and iPhone. It is made by Vorelyon (Vorelyon Digital Systems Engineering, the Netherlands). This policy explains what data vorClinic handles and how.

Who is responsible for patient data

The clinic (the doctor who holds the vorClinic licence) decides which patient information is recorded and is the controller of that data. Vorelyon processes it only to provide the service: storage, synchronisation between the clinic's devices, backups and the optional AI features.

What data is handled

• Clinic data entered by the clinic: patient files, visits, complaints, diagnoses, prescriptions, lab results and images, nutrition records, the reception queue, fees and income.
• Account data: the clinic name and the user names, logins and password hashes of the doctor and reception accounts.
• Licence and device data: the licence code, a device identifier generated from the device, the device model and operating system, and the time of the last check. These are used to activate the licence and limit it to the permitted number of devices.

vorClinic does not show ads, does not use advertising or analytics trackers, and does not sell or share data for marketing.

Where data is stored

Data is stored first on the clinic's own devices, so the app keeps working without internet. It is synchronised to the vorClinic server in a data centre in Germany (European Union). On the server, each clinic's records are encrypted with a separate key (AES-256-GCM). Connections use HTTPS. Encrypted server backups are kept for 14 days.

AI features

The suggested diagnosis, suggested treatment, diet plan and lab-result extraction features are optional and only run when the doctor presses the button. For suggestions, the app sends the clinical details of the visit without the patient's name or phone number. For lab extraction, the image the doctor selects is sent. Requests pass through the vorClinic server to the AI provider (OpenAI, or Google Gemini as a fallback) and are not used by vorClinic for any other purpose. AI output is a suggestion for the doctor and is not a diagnosis.

Camera and photos

The camera and photo library are used only when the doctor chooses to photograph or attach a lab result, X-ray, ECG or other document to a patient file.

Retention and deletion

Clinic data is kept while the clinic uses vorClinic. The clinic can delete individual patients and visits in the app at any time. To delete the whole clinic account and its data from the server, see Delete your account. Data is removed from the server within 30 days of a verified request, and from backups when they expire.

Your rights

Patients who want to access, correct or delete their information should contact their clinic. Clinics can contact Vorelyon to exercise their rights under the GDPR, including access, correction, deletion and portability (the app can export data to CSV).

Children

vorClinic is intended for clinic staff, not for use by children.

Contact

Vorelyon, the Netherlands · info@vorelyon.com · vorelyon.com