Climo is provided by Goodshift, 8 Mohamed Mokaled St., 23, Corner of Yassin Ragheb St., Nasr City, Cairo, Egypt. Under Egypt's Personal Data Protection Law No. 151 of 2020, each clinic (the practitioner) is the data controller of the patient records it keeps in Climo, and Goodshift is the data processor that stores and displays them on the clinic's instructions. For your own account details — your email, phone number and sign-in — Goodshift is the controller.
For a clinic: the clinic profile, its brand colour and logo, opening hours, business documents used for verification, its catalogue of services, products and packages with their photographs, its stock counts and costs, the patient records the clinic enters, appointments, payment records, and the photographs and documents attached to them.
For a patient: your name, phone number, email, the details you give a clinic, your bookings, your payment proofs and your links to clinics.
For everyone: basic device and usage data so we can fix crashes, and the notification choices you make. If you allow notifications, we also store the address Apple gives this phone for sending them, kept only while you are signed in on it, and used only to send you Climo's notifications.
Only the clinic that entered a patient record, and the staff it adds, can read it. Climo staff never read patient records. A patient who links to a clinic sees their own visits, packages and payments, and any note the practitioner chooses to share.
The details you enter as a patient — your name, date of birth, medical answers, emergency contact and optional photo — stay on your account, where only you can see them. When you ask a clinic to link, that clinic sees your name, your verified phone number and your photo so it can recognise you; the rest of your details reach it only if it approves your request. From then on the clinic keeps them in its record of you, as the controller of that record. When a clinic declines your request, or you cancel it, the clinic keeps no copy of your name, number or photo.
A clinic's catalogue, name, logo, brand and hours are visible to signed-in patients — that is what lets someone find you and book. Its stock counts and costs are not: they are private to the practitioner and any doctor they add, and are hidden even from clinic assistants.
Business documents are read by Climo staff only to verify a clinic, and every such read is recorded.
We hold your account details to provide the service you asked for, and to meet the law. A clinic holds patient records on the consent it obtains from each patient, and on the professional and record-keeping duties that apply to it — the clinic, as controller, decides and records that basis. We keep financial rows because tax law requires it. We keep a small amount of crash and usage data on the consent you give when you accept the Terms at sign-in; you are not tracked across other companies' apps or websites, and we do not sell data or use it for advertising.
Patient records and health data are stored in the United States, outside Egypt, on Google Cloud. Our sub-processors are:
us-central1, United States), sign-in, crash reporting and usage analytics.Each acts under its own terms and safeguards. We do not add a sub-processor without updating this page.
Account deletion is a 30-day soft delete: for 30 days nothing is removed and signing back in restores everything. After 30 days the clinic's records — patients, visits, photographs, documents, bookings, the catalogue and its photographs, the public profile and its files — are permanently deleted.
Financial ledger rows are kept for 5 years with names and patient references removed, as the law requires. Payment-proof images are deleted 90 days after the appointment ends. A catalogue photograph you replace is deleted at once; one left behind by a form you never saved is removed within 24 hours. Subscription records held by Apple and by RevenueCat stay under their own terms.
A patient's deletion removes their account and its links to clinics; each clinic keeps its own records of them, as that clinic's controller. Deleted data can persist in our backups for up to 30 further days.
You can ask to see the personal data held about you, to have it corrected, to have it deleted, and to object to how it is used. Where the data is a patient record, the clinic answers as the controller and we help it; where it is your Climo account, we answer. You can change your currency and notification choices in Settings, and delete your account there. You may also complain to Egypt's Personal Data Protection Centre.
Climo accounts are for people aged 18 or over. A child's records live in a clinic's own records, kept by the clinic as controller with the consent of a parent or guardian. We do not knowingly create an account for a child; tell us at support@goodshift.work if you believe one exists and we will remove it.
Records are encrypted in transit and at rest. Access is limited by rules that check who is signed in and which clinic they belong to, and requests are checked to confirm they come from the real Climo app. Notes a practitioner keeps for themselves are private by default and are shared with a patient only when the practitioner chooses. Item names, prices and patient details are kept out of our server logs by design.
If a breach affects your data, we tell the clinic and, where the law requires, the regulator and the people affected.
Requests about your data go to the controller: for patient records, the clinic; for your account, Goodshift at support@goodshift.work, 8 Mohamed Mokaled St., 23, Corner of Yassin Ragheb St., Nasr City, Cairo, Egypt. We answer within 30 days. A copy of a clinic's records is available on request until an in-app export is available.