Privacy policy
Last updated 31 October 2026
NammaClinic is clinic software made by Winkle Studios, India. Clinics use it to run their outpatient queue, bill patients and send visit updates. This policy explains what we collect, why, and the choices patients and clinics have. It is written for the Digital Personal Data Protection Act, 2023.
Who is responsible
Each clinic decides how it uses NammaClinicand is responsible for its patients' records. Winkle Studiosprocesses that data on the clinic's behalf and only to provide the service. For our own account data (clinic owners and staff), Winkle Studios is responsible.
What we collect
- Patients: name, mobile number, age and gender if given, preferred language, visit tokens and times, bills, and feedback they choose to send.
- Clinic staff: name, phone or Google email, role and activity needed to run the clinic.
- WhatsApp messages a patient sends to the NammaClinic number, and the replies we send.
How we use it
- To give a token, show its place in the queue and say when it is the patient's turn.
- To prepare bills and receipts for the clinic.
- To ask about the visit and pass feedback to the clinic.
- To keep the service secure and fix problems.
We never sell personal data and never use it for advertising.
WhatsApp messages
We message a patient on WhatsApp only after they check in at a clinic, and only about that visit: their token, when they are next, when it is their turn, and a feedback question afterwards. Replying STOP turns all messages off; START turns them on again.
Where data is stored and who sees it
Data is stored with our service providers: Neon (database), Cloudflare (hosting) and Zernio with Meta (WhatsApp delivery). Only the clinic a patient visited and its authorised staff can see that patient's records. Waiting-room screens show token numbers, never names.
How long we keep it
Visit and billing records are kept while the clinic uses NammaClinic, as medical and tax records require. When a clinic leaves, we delete its data within 90 days unless the law requires us to keep it longer.
Your rights
Patients can ask their clinic, or us, to see, correct or delete their details, or to withdraw consent for messages. Write to contact@winkle.dev and we will respond within 30 days.
Contact
Winkle Studios, India · contact@winkle.dev