Security and privacy
Your patients' records stay with your clinic.
In plain words: how each clinic's records are kept apart, who can see what, and how ClinicHours follows the Data Privacy Act of 2012 (Republic Act No. 10173).
Who sees what
Everyone sees only what their role needs.
The patient's doctor
Sees: The whole chart: visit notes, diagnoses, prescriptions, records for their specialty, photos of the paper chart.
Never sees: Another doctor's patients, unless that doctor shares one with them.
Your secretary
Sees: The queue, bookings, contact details, vital signs, bills and chart photos for the clinics they run.
Never sees: The doctor's clinical notes, or the patients of clinics they don't run.
Another doctor
Sees: Only a chart you choose to share, for a referral or while they cover for you, for a time you set. Every opening is logged.
Never sees: Your patient list, or anything you didn't share.
The ClinicHours team
Sees: Your account, plan and payments, and counts such as how many bookings a clinic has.
Never sees: Patient records. Our admin pages have no way to open them.
How it's built
Kept apart by the database, not just the screen.
Each clinic's records are walled off
The database itself checks, on every request, which clinic you belong to. A screen or app with a bug still can't show another clinic's patients.Each person sees only their part
Inside a clinic, a secretary sees the clinics they run, and clinical notes stay with the patient's own doctor.Opening a chart leaves a trace
Every time staff open a patient card it is logged, and so are changes to records. The doctor sees who opened, changed or exported a card.Chart photos stay private
Photos of the paper chart are private files, opened through links that expire after a few minutes.Patients don't see the database
Patients book with a code sent to their own phone and see only their own queue number. They never sign in to anything.Encrypted on the way
Everything travels encrypted (HTTPS). Passwords are kept by our sign-in provider and are never readable by us.
RA 10173
Built for the Data Privacy Act.
Your clinic decides how patient information is used (the controller); ClinicHours stores and handles it for you (the processor). Patients agree to the privacy notice when they book, and that consent is recorded.
What your clinic can do for a patient who asks
- Give a patient a copy of their record, in a file they can take elsewhere.
- Correct their details, or delete their patient card from ClinicHours when they ask.
- See who opened, exported or changed a patient card.
- Share a chart with another doctor only with the patient's consent, recorded with who agreed and when.
Questions
What doctors ask us about privacy.
Who owns the patient records?
Where are the records stored?
Do you sell data or show ads?
What happens to my records if I stop paying?
If my secretary leaves, can they still see my patients?
Does voice dictation record my consultations?
No. Dictation runs only while the doctor holds the button, for the doctor's own notes. The short clip is sent to a speech-to-text provider to write down the words; which providers and what each keeps are in our privacy notice.
What if something goes wrong?
Try it with your clinic, free for 2 months.
Then from ₱799 a month. No card needed to start.