Privacy policy

KleioVision Tech SRL, a company under Belgian law with its registered office in Belgium, is the controller of the personal data collected through Evolarin (the “Service”). Data protection contact: dpo@kleiovision.tech.

Evolarin is a medical writing assistant, NOT a hospital information system (HIS/EHR). The Service does not store or process identifiable patient data. All clinical data entered by the doctor is pseudonymised at source (initials + year of birth), both in the interface and in the database, through automatic rules that reject real names and valid Romanian personal identification numbers (CNPs).

Patient identifiers (full name, CNP, address, date of birth) are entered exclusively when printing a document, locally in the doctor’s browser, without being transmitted to Evolarin servers or saved. These details disappear when the print window is closed.

Official documents (patient charts, discharge summaries and medical letters) are recorded exclusively in the employing healthcare facility’s information system (InfoWorld, Hipocrate, etc.) by the doctor, by copying the content generated by Evolarin.

For users (doctors), the controller processes:

• Account data: name, email and password (encrypted).
• Professional data: specialty and healthcare facility (optional).
• Service usage logs (audit and security).

For patients, in a strictly pseudonymous form:

• Initials (e.g. M.A.) · do not permit identification.
• Year of birth (day and month are forced to 01-01).
• Internal patient code (e.g. PAC-001) · not a CNP.
• Clinical data (diagnosis, progress and treatment).

Under GDPR Recital 26, these data do not constitute personal data as long as the person cannot be reidentified by reasonable means. The doctor using the Service is responsible for not entering identifiable data; Evolarin applies technical validations that reject such data.

• Lovable AB (Sweden) · application infrastructure hosting.
• Supabase Inc. (EU region) · database and authentication.
• Google LLC · Gemini API, accessed through Lovable AI Gateway, exclusively with pseudonymised data.

You have rights of access, rectification, erasure, restriction, portability (Articles 15–20 GDPR), objection, and to lodge a complaint with the Belgian Data Protection Authority (APD/GBA) or ANSPDCP (Romania). Requests: dpo@kleiovision.tech.

Account data is retained for the duration of Service use plus 12 months. Automatic pseudonymisation of clinical records runs 30 days after discharge.