Privacy

This is a demonstration clinic booking system built for an assessment. It is not a real clinic, and the data in it is meant to be test data. Please do not enter real health information.

What is stored

• Your name and email address, taken from your Google account the first time you book. The booking service can also hold a phone number, but this site does not ask for one.
• Your appointments: the doctor, the time, and whether it was booked, rescheduled or cancelled, with the reason you give when you cancel.
• A record of each booking change (what changed and when), so the history of an appointment can be shown.

Google user data

You can sign in with your Google account. We ask Google only for the OpenID Connect scopes openid, email and profile, and from them we receive your name, email address, whether Google has verified that address, and your profile picture. We never see your Google password, and we do not ask for access to Gmail, Drive, Calendar, contacts or any other Google service.

How we use it

Only to sign you in, to show you your own appointments, and to send appointment emails to your address. We do not use it for advertising, profiling or analytics, and no person reads it except to support you.

How it is stored and shared

Your name, email address and picture are stored in our database on Neon. The clinic's owner and admins can see your name and picture next to your appointments; staff with view-only access see your name only. Your sign-in session lives in a cookie on this site only. We never sell Google user data or share it with anyone for their own purposes. The only service that receives your email address is Resend, which delivers the appointment emails for us.

Retention and deletion

We keep your account data until you ask us to delete it, or until the demonstration data is reset. To delete your account and everything tied to it, write to developer.ericgitangu@gmail.com from the address on the account, and we will remove it within 30 days. You can also revoke access at any time in your Google account permissions.

Google API Services User Data Policy

Idyllic Clinic’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Protection against automated abuse

Forms that change a booking use Google reCAPTCHA. It looks at signals from your browser to score whether a request comes from a person, and Google handles that data under its own privacy policy. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Email

When you book, reschedule or cancel, and the evening before an appointment, we send an email through Resend to the address on your account. The email contains the appointment details.

Where it lives

The site runs on Vercel, the booking service on Google Cloud, and the database on Neon. Appointment data is not sold or shared for advertising.

Deleting your data

Because this is a demonstration, test data may be removed at any time. To have your data deleted sooner, write to developer.ericgitangu@gmail.com.

Contact

Questions about this page or your data: developer.ericgitangu@gmail.com.