Privacy Policy

This Privacy Policy describes how iClear (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our websites, platforms, and applications, including https://iclear.al, our clinic and laboratory software at https://app.iclear.al, and our mobile application iClear Courier (together, the “Services”).

By using the Services, you acknowledge this Policy. If you do not agree, please do not use the Services.

1. Who we are

Data controller: iClear
Website: https://iclear.al
Application platform: https://app.iclear.al
Privacy contact: info@app.iclear.al (subject line: “Privacy”)

iClear provides digital solutions for clear aligner workflows, including tools for clinics, laboratories, and field couriers. Different Services may process different categories of data depending on your role (clinic staff, laboratory user, courier, patient data entered by healthcare providers, etc.).

2. Scope of this policy

This policy applies to personal data processed by iClear in connection with:

the iClear public website and marketing pages at iclear.al;
the iClear web application and APIs at app.iclear.al (clinics, laboratories, administration);
the iClear Courier mobile app for Android and iOS (package / bundle ID: com.iclear.courier);
support, security, and communication related to the above.

Clinics and laboratories using iClear may also process data under their own privacy policies as independent or joint controllers for their patients and staff. Where your employer or clinic manages your account, they may hold additional information about you.

3. Categories of data we process

3.1 Account and contact data

Name, email address, username, phone number, professional role, clinic or laboratory affiliation
Login credentials (passwords are stored in hashed form; we do not store plain-text passwords)
Preferences, language, and account settings

3.2 Operational and business data

Orders, treatments, production status, delivery and logistics information
Payment and invoicing data where applicable (amounts, currency, collection and handover records)
Documents you upload (photos, receipts, signatures, notes) when required by a workflow
Audit and activity logs for security, troubleshooting, and compliance

3.3 Patient and clinical data

Where clinics use iClear, they may enter patient-related information (e.g. name, contact details, treatment data). iClear processes this data on behalf of or together with the clinic to provide the Services. Patients should contact their clinic for questions about medical or patient records.

3.4 Technical and usage data

IP address, device type, browser or app version, operating system
Date and time of access, pages or screens viewed, API requests (in server logs)
Cookies and similar technologies on our websites (see Section 8)

3.5 Location data

Some Services especially iClear Courier may collect precise location (GPS) when you grant permission, including during active work shifts or delivery-related actions. Details are in Section 10.

3.6 Push notifications

Mobile apps may store a device push token to send notifications about orders, status changes, or account-related messages.

4. How we use personal data

We use personal data to:

provide, operate, and maintain the Services;
authenticate users and protect accounts;
enable clinics, laboratories, and couriers to manage orders, logistics, and payments;
send service notifications and respond to support requests;
improve performance, fix errors, and develop new features;
comply with legal obligations and enforce our terms;
prevent fraud, abuse, and security incidents.

Legal bases (where applicable, e.g. GDPR): performance of a contract; legitimate interests (security, service improvement); consent (e.g. optional marketing cookies, device permissions); legal obligation.

5. Sharing and disclosure

We may share personal data with:

Your organization (clinic, laboratory, employer) when you use Services under their account;
Service providers (hosting, email, analytics, push notification delivery, maps) under contracts that require appropriate protection;
Professional advisers (lawyers, auditors) when necessary;
Authorities when required by law or to protect rights and safety.

We do not sell personal data for third-party advertising.

Maps and navigation may use Google Maps (Google’s privacy policy applies to their processing). Push notifications may be delivered via Apple, Google, and Expo infrastructure.

6. International transfers

Data may be processed on servers located in the European Economic Area and/or other countries. Where required, we implement appropriate safeguards (such as standard contractual clauses) for transfers outside your jurisdiction.

7. Retention

We retain personal data only as long as needed for the purposes described in this Policy, including legal, accounting, and dispute-resolution requirements. Retention periods may differ by data type and by contractual obligations to clinics and laboratories. Logs and backups are rotated or deleted according to our internal schedules.

8. Cookies and similar technologies (websites)

Our websites may use cookies and similar technologies for essential functions, security, and where enabled analytics or preferences. You can control cookies through your browser settings. Disabling some cookies may limit website functionality.

9. Security

We implement technical and organizational measures appropriate to the risk, including encrypted connections (HTTPS), access controls, and secure handling of credentials. No method of transmission or storage is completely secure; please use strong passwords and protect your devices.

10. iClear Courier mobile application

This section applies specifically to the iClear Courier app.

10.1 Purpose

iClear Courier is for couriers who deliver and collect on behalf of iClear partner clinics and laboratories. You sign in with credentials issued by your organization.

10.2 Data processed in the app

Courier profile: name, username/email, phone, courier and clinic identifiers
Assigned orders: recipient/clinic, address, phone, schedule, status, payment amounts when collection is required
Actions you take: pickup, in transit, delivery, problems reported, payment collection, digital handover forms
Location (GPS): when you are on shift or perform delivery-related actions, including background location if you allow “Always” / “All the time” permission
Camera / photo library: only when you attach receipt or delivery images
Push notifications: device token for alerts about new orders or updates
Biometric login (optional): Face ID or fingerprint is verified on your device; iClear does not receive biometric templates

10.3 Permissions

The app requests device permissions only for features you use (location, notifications, camera, biometrics). You can change permissions in your phone’s system settings; some features may not work without them.

10.4 Delete App account

In Profile → Delete App account, you can delete your iClear Courier app profile by confirming your password. This deactivates push notifications, clears profile fields stored for the app, and marks the app account as deleted.

This does not automatically delete your employment record with your clinic or historical order/accounting data held by your employer; contact your clinic for those requests. You may sign in again with clinic credentials, which may recreate your app profile.

10.5 Privacy link in the app

The app links to this policy at https://iclear.al/privacy-policy.

11. Your rights

Depending on applicable law (including Albanian personal data protection law and, where relevant, the GDPR), you may have the right to:

access and obtain a copy of your personal data;
rectify inaccurate data;
erase data in certain circumstances;
restrict or object to processing;
data portability where applicable;
withdraw consent where processing is consent-based;
complain to a supervisory authority.

To exercise your rights, email info@app.iclear.al. We may need to verify your identity. If your account is managed by a clinic, we may direct you to them for certain requests.

12. Children

The Services are not directed at children under 16. We do not knowingly collect personal data from children. Patient data concerning minors is entered by healthcare providers under their own responsibilities.

13. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Material changes may be communicated via the Services, email, or app notifications where appropriate. Continued use after updates constitutes acceptance of the revised Policy.

14. Contact

iClear
Email: info@app.iclear.al
Website: https://iclear.al
Application platform: https://app.iclear.al

Policy URL: https://iclear.al/privacy-policy