Privacy Policy for Lizar Clinic

Effective Date: May 2, 2026

Note for Regulators: This policy has been updated to explicitly define data retention periods and deletion procedures for our local-only architecture.

This Privacy Policy is designed to inform medical professionals, hospital administrators, and clinical staff about the rigorous data handling practices of Lizar Clinic. Given the sensitivity of medical records and patient health information (PHI), this application has been engineered with a "Zero-Cloud" architecture.

Fundamental Security Commitment

Lizar Clinic DOES NOT use cloud services, external servers, or internet-based databases. All clinical data, medical histories, patient identifiers, and cognitive stimulation results are stored exclusively within the encrypted local storage of the user's device. Access to this data is technically impossible from outside the physical device or by the developer.

1. Scope of Clinical Data Privacy

The Application is a self-contained professional tool. It handles several types of sensitive information, including but not limited to:

Patient Records: Full names, clinical history, and diagnostic data.
Session Outcomes: Detailed logs of cognitive exercises and clinical evaluations.
Professional Observations: Encrypted notes entered by the attending physician or specialist.

None of this information ever leaves the hardware. There are no background processes that "sync" or "backup" data to any online repository controlled by the developer or third parties.

2. Data Retention and Storage Duration

Lizar Clinic does not determine or control how long patient data is stored. Since all information is saved locally on the user's device:

Duration: Data is retained on the device as long as the application is installed or until the professional user decides to delete it manually.
System Uninstallation: If the user uninstalls the application, all locally stored clinical data, patient records, and session logs will be permanently deleted by the operating system's sandbox cleaning process.

3. Data Deletion Rights and Procedures

Users have absolute control over the clinical data stored within the app. Data can be deleted through the following methods:

Manual Deletion: The professional user can delete individual patient records or session logs at any time using the "Delete" functions within the application's management interface. This action is immediate and irreversible.
Total Data Clearance: Users may clear all application data through the device's system settings (Settings > Apps > Lizar Clinic > Storage > Clear Data), which will wipe the local database entirely.
Account/Data Deletion Request: Since the app is offline and does not use accounts or cloud servers, there is no "account" to delete on a server. Deletion is managed locally by the professional as the sole Data Controller.

4. Technical Architecture & Access Restrictions

Access to clinical records is restricted in the following ways:

Local-Only Access: Data is saved in a sandboxed directory accessible only by the Lizar Clinic application.
No Remote API: The application does not contain code to connect to remote APIs for data transmission.
No Developer Access: Because there is no central database, the developers of Lizar Clinic have zero technical capability to view, recover, or monitor your patients' data.

5. Regulatory Compliance (HIPAA/GDPR Principles)

By design, Lizar Clinic facilitates compliance with international medical data protection laws. Since data never crosses international borders or enters the public internet, the risk of data breaches during transmission is eliminated. Professional users remain the sole "Data Controllers" of their patients' information.

6. User Responsibilities

Since the application is 100% offline, the user is responsible for the physical and digital security of the device. We recommend:

Enabling full-disk encryption on the mobile device or PC.
Implementing strong biometric or alphanumeric authentication.
Executing manual backups to secure, institutional storage media as per local hospital protocols.

7. Information Sharing

Lizar Clinic does not share, sell, or rent data. There are no advertising SDKs, no telemetry trackers, and no analytics engines included in the software bundle. The integrity of the clinical environment is absolute.

8. Contact and Technical Inquiries

For more information regarding the encryption and local storage architecture, professional users may contact the developer through the official support channels provided in the Google Play Store.