Clinic-AI ו-Google: יומן וקבלות

In English

Clinic-AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Clinic-AI is clinic management software for independent healthcare practitioners in Israel. Connecting a Google account is optional and is always done by the practitioner. Patients never connect a Google account.

• calendar.readonly: read busy times from the calendars the practitioner selects, and read back the events Clinic-AI created, to avoid double booking and to detect a reschedule or deletion made in Google. We do not read the content of the practitioner's other events.
• calendar.events: create, update and cancel only the clinic appointments Clinic-AI created, identified by an event id we store. We never modify or delete any other event.
• gmail.readonly: only when the practitioner explicitly connects a receipts mailbox, read messages that look like a receipt or an invoice, using a targeted keyword and sender query, in order to record the expense or income in the books. We do not read the rest of the mailbox, and we never send, label or delete mail.
• openid and email: identify which Google account is connected, so it can be shown to the practitioner and the same mailbox cannot be connected twice.

Google user data is never used for advertising, never sold or transferred to third parties beyond the operational subprocessors listed in our privacy policy, and never used to train AI models. No human at Clinic-AI reads Google data except with the practitioner's explicit permission, for a security investigation, or where required by law.

OAuth tokens are stored in an AES-256 encrypted database (SQLCipher) and are deleted on disconnect and on account closure. A practitioner can disconnect the calendar in Settings, remove a mailbox in the Finance ledger, or revoke access at myaccount.google.com/permissions.