Privacy Policy

OptIVF is a staff-facing clinical companion app we publish for authorised clinicians and staff of fertility clinics that run OptERP Fertility. Because it handles clinical data on behalf of clinics rather than website visitors, its data practices are summarised separately here.

Who controls the data. OptIVF connects to a server operated by, or on behalf of, the clinic that employs the user (the “Clinic”). Patient and clinical information accessed through the app belongs to and is controlled by the Clinic (the data controller); Geofinity acts as a processor under the Clinic’s instructions.

Information the app handles. Account credentials and role used to authenticate staff; a device push-notification token (Apple Push Notification service / Firebase Cloud Messaging); clinical/patient information viewed or entered (cases, cycles, observations, vitals, medications, lab and consent data), stored on the Clinic’s server and cached on-device only to function; photos staff explicitly choose to attach to a record; and standard, non-personal crash/diagnostic logs. We do not operate third-party analytics or advertising SDKs in the app.

How it’s used, and sharing. Solely to authenticate staff, display and update the Clinic’s records, send operational notifications, and keep the app secure — never sold or used for advertising or cross-app tracking. Information is exchanged only with the Clinic’s server and with Apple/Google push-notification services.

Security & retention. All network communication is encrypted (HTTPS); cached data is encrypted at rest with the key held in the device keychain. Staff can enable an optional biometric/passcode app-lock and screen-capture protection. Signing out clears session and cached data from the device. Clinical records themselves are retained on the Clinic’s server per the Clinic’s own policy.

Rights & children. Because the Clinic controls clinical data, requests to access, correct, or delete patient information should be directed to the Clinic. OptIVF is intended for clinical professionals and is not directed to children.

OptDAI (Opt Doctor Assistance Intelligence) is a medical assistant app for doctors and clinicians to record patient encounters, vital signs and clinical notes, with on-device dictation, document scanning and decision support. It is offline-first: patient records are kept on the user’s own device and are not sent to Geofinity or any server we operate.

Who controls the data. The doctor or clinic using OptDAI decides what is recorded and is the data controller for the patient information held in the app. Geofinity provides the software only; we have no access to the records on your device and cannot view, recover or disclose them.

Information the app handles. Patient and clinical information you enter (demographics, encounters, vitals, notes and letters), stored only in an encrypted database on the device; an app PIN and optional biometric unlock, where biometric matching is performed by the operating system and never reaches the app; microphone audio, only while you dictate, transcribed by an on-device speech model and never sent off the device; photos and documents you choose to attach, with any text recognition run on the device; and questions you ask the built-in assistant, answered on the device from your local records, including by an optional on-device language model.

Network use and sharing. OptDAI has no account, no backend and no analytics, advertising or crash-reporting SDKs. Its only network requests download optional speech or language models from a public model host (Hugging Face) when you tap Install in Settings; they contain no patient data or identifiers, although the host will see your IP address as with any download. Nothing is sold or used for advertising or tracking. Information leaves the device only when you choose to — for example by printing or sharing a PDF letter through the system share sheet, or by starting a call or message to a contact.

Security & retention. The database is encrypted at rest with a key held in the device keychain/keystore, and the app locks behind your PIN or biometrics. Operating-system cloud and device backups are disabled for the app so records are not copied off the device. Data stays on the device until you delete it in the app or uninstall the app, which permanently removes it; you are responsible for retaining records as required by your professional and legal obligations.

Rights & children. Patients who wish to access, correct or delete their information should contact the doctor or clinic that recorded it. OptDAI is intended for healthcare professionals and is not directed to children.

OptHealth is a staff-facing mobile app we publish for authorised doctors, nurses and staff of hospitals that run OptERP Hospital. Because it handles clinical data on behalf of hospitals rather than website visitors, its data practices are summarised separately here.

Who controls the data. OptHealth connects to a server operated by, or on behalf of, the hospital that employs the user (the “Hospital”). Patient and clinical information accessed through the app belongs to and is controlled by the Hospital (the data controller); Geofinity acts as a processor under the Hospital’s instructions.

Information the app handles. Account credentials, department and role used to authenticate staff; a device push-notification token (Apple Push Notification service / Firebase Cloud Messaging); clinical/patient information viewed or entered (registrations, appointments, OPD/IPD encounters, admissions, vitals, orders, medications, lab and imaging results), stored on the Hospital’s server and cached on-device only to function; photos staff explicitly choose to attach to a record; and standard, non-personal crash/diagnostic logs. We do not operate third-party analytics or advertising SDKs in the app.

How it’s used, and sharing. Solely to authenticate staff, display and update the Hospital’s records, send operational notifications, and keep the app secure — never sold or used for advertising or cross-app tracking. Information is exchanged only with the Hospital’s server and with Apple/Google push-notification services.

Security & retention. All network communication is encrypted (HTTPS); cached data is encrypted at rest with the key held in the device keychain. Staff can enable an optional biometric/passcode app-lock and screen-capture protection. Signing out clears session and cached data from the device. Clinical records themselves are retained on the Hospital’s server per the Hospital’s own policy.

Rights & children. Because the Hospital controls clinical data, requests to access, correct, or delete patient information should be directed to the Hospital. OptHealth is intended for healthcare professionals and is not directed to children.