Contents
This policy covers the website, its forms and the SuperClini app. Patient data that a clinic records in the platform, including from the app, is governed by the Terms of use and by the contract each clinic accepts.
01Who the controller is
SuperClini is a brand of LF BROTHERS SpA, a Chilean company, RUT 78.441.027-7, with its address at Apoquindo 6410, oficina 605, Las Condes, Santiago, Chile. We are the controller of the data collected by this website (superclini.com and cl.superclini.com) and its forms.
Contact for anything related to your data: [email protected].
02What data we collect
- Contact form: name, email, phone, clinic name, country, team size, what you are interested in and your message.
- Application to the partner program (Chile): name, email, phone, company, region, comuna, profile, number of clinics you work with, availability and message.
- When you submit a form: your IP address, browser and the page you wrote from, to prevent abuse.
- Only if you accept marketing: which campaign, ad or partner you came from (utm parameters, Google and Meta click identifiers and the partner code), the landing page and the date of first contact.
- “Was this helpful?” votes in the Help center: they are anonymous and store nothing that identifies you.
The website does not collect health data. It is not aimed at minors.
03What we use it for
- Answering your inquiry and preparing a proposal or a demo.
- Reviewing your application to the partner program.
- Sending you product news, only if you agreed to it. You can unsubscribe whenever you want.
- Measuring which campaigns work, only if you accepted marketing.
- Protecting the website against fraud and abuse, and meeting legal obligations.
We do not sell your data or use it for automated decisions that affect you.
04Legal basis
- Your consent, which you give by ticking the form checkbox or by accepting marketing cookies. You can withdraw it at any time, and withdrawing it does not affect what was done before.
- Our legitimate interest in keeping the website secure and preventing abuse.
- Meeting legal obligations, such as tax obligations when you become a customer.
We apply the data protection law of your country: in Chile, Ley 19.628 as amended by Ley 21.719; in Brazil, the LGPD; in the European Union, the GDPR and the ePrivacy Directive; and the local law in the other countries where we operate. The full table is in the Terms of use.
05Your rights
You can ask us, at no cost, to:
- access the data we hold about you;
- correct it if it is incomplete or wrong;
- delete it;
- object to a use or ask us to restrict it;
- receive it in a format you can take to another provider;
- withdraw your marketing consent.
Write to [email protected] from the email address you gave us. We reply within 30 calendar days, or sooner if the law of your country sets a shorter deadline. If you are not satisfied, you can file a complaint with the data protection authority of your country; in Chile, the Personal Data Protection Agency (Agencia de Protección de Datos Personales).
06How long we keep it
- Sales contacts and applications: up to 24 months from the last contact. After that we delete them.
- If you become a customer, your contact data becomes governed by the clinic's contract.
- Tax documents and contracts: for the period required by law.
- Cookies: the period for each one is in the table in the cookies section.
08Who we share it with
Your data is stored on cloud infrastructure servers located in Brazil, and the website's traffic goes through the Cloudflare network. These providers only store and carry the information; they do not use it for their own purposes.
Today we do not share data with advertising platforms. If in the future, with your marketing consent, we tell Google or Meta that a contact from a campaign became a customer, it will be server to server, with the contact data protected by hashing. Before we start, we will update this policy and ask for your choice again.
If you write from another country, your data is transferred to those servers in Brazil so we can reply to you.
09Security
All communication with the website is encrypted (HTTPS), and the database has an encrypted daily backup kept outside the main server.
10YouTube API Services
SuperClini publishes the videos on its YouTube channel (@SuperClini) with an internal tool that uses the YouTube API Services. That use is subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy).
The tool accesses only our own channel, authorized by our team through OAuth. It does not access other people's channels or data, and it does not collect, store or share data from YouTube users. The only thing we store is the authorization token for our own account, on our server.
Access can be revoked at any time from the Google permissions page (https://security.google.com/settings/security/permissions); when it is revoked, we delete the token. Questions about this: [email protected].
11SuperClini app
The SuperClini app for iPhone, iPad and Android is for people who work at clinics that use SuperClini. Your clinic creates your account; you cannot sign up in the app. It is not aimed at patients or at minors.
The patient data you see and write in the app (records, clinical notes, photos, messages and payments) is the same as in the web platform and travels encrypted (HTTPS). The clinic is the controller of that data, and SuperClini processes it on the clinic's behalf, as the Terms of use explain.
What the app uses on your phone, and only when you ask
- Camera: for clinical photos. They go straight to the patient's record and are not saved to the phone's gallery.
- Microphone: only while you dictate a clinical note. The audio is sent to OpenAI only to transcribe it and is not stored on the phone or on our servers. You review the text before saving it.
- Fingerprint or face: your phone checks them. We never receive biometric data.
- Notifications: alerts from the clinic, such as a new appointment, a patient's arrival, a signature, a payment or a message. By default they do not show the patient's name on the lock screen; you can change this in the app.
What we keep from your phone
- An identifier the app creates when it is installed (not the serial number or an advertising identifier), the phone model and the app version, so you can see and end your sessions under “Connected devices”.
- The notification token, to send you alerts. When you sign out it stops being used and is deleted together with the session.
What we do not do
- We do not use your location or your contacts.
- There is no advertising, no third-party analytics and no tracking across apps.
Providers involved in the app
- Expo: sending alerts and app updates.
- Google Firebase Cloud Messaging and Apple Push Notification service: delivering alerts on Android and on iPhone or iPad.
- OpenAI: transcribing dictation.
- Cloud infrastructure, with providers such as Amazon Web Services: the platform's servers and database, in Brazil.
The full list of the platform's providers is in the Terms of use.
Deleting your account
Your clinic creates your account and is also the one that deactivates it. To delete it, ask your clinic's administrator, or write to [email protected] from your account's email address, saying which clinic it belongs to. We reply within 30 calendar days, the same deadline as for your other rights.
- Your access is turned off: you can no longer sign in to the clinic, on the web or in the app.
- We delete your account data (name and email), except what the law requires us to keep.
- When you sign out, the app erases your credentials from the phone and the server turns off alerts for that phone.
What you recorded in patient records is not deleted with your account: it is part of the clinical record, which belongs to the clinic and which the law requires to be kept for a minimum period (in Chile, at least 15 years).
12Changes to this policy
If we change this policy, we publish the new version here with its date. If the change affects what you accepted about cookies, the website asks you again.
Write to us to exercise your rights or to clear up any question about this policy.
[email protected]Version 2.1 · effective October 9, 2026