Privacy Policy

1. Who we are

MedFlux is a secure medical communication and clinical workflow product operated by Lerensoft (“we”, “us”). This Privacy Policy explains how we process personal data when you use medflux.net, the MedFlux doctor platform, the patient app, and related services (the “Services”).

2. Scope

This policy covers accounts, messaging, calls, documents, clinical modules, AI features, websites, and support communications. Where health data is processed, we apply heightened safeguards consistent with applicable data-protection and medical-confidentiality rules (including GDPR and, where relevant, KVKK).

3. Data we process

Depending on how you use MedFlux, we may process:

• Account data — name, email, phone, professional credentials, organization/lab affiliation, authentication data.
• Communication data — messages, attachments, call metadata, delivery status. Content of end-to-end encrypted chats is not readable by Lerensoft servers in zero-knowledge / E2EE modes.
• Health-related data — patient profile fields, clinical documents, images, DICOM studies, and module data you or your clinician choose to store in the Service.
• Technical data — device identifiers, IP address, app version, crash/diagnostic logs, and security event logs needed to operate and protect the Service.
• Billing data — plan, invoices, and payment processor references (card details are handled by the payment provider, not stored by us in full).

4. How we use data

• Provide, authenticate, and secure doctor–patient communication and clinical workflows.
• Deliver optional AI assistance features you explicitly use.
• Operate billing, support, abuse prevention, and service reliability.
• Comply with legal obligations and respond to lawful requests.
• Improve product quality using aggregated or de-identified signals where feasible.

We do not sell personal data. We do not use patient health content for advertising.

5. Legal bases

Where GDPR/KVKK apply, processing is typically based on: contract performance; legitimate interests (security, fraud prevention, service improvement); consent (where required, e.g. certain optional features or marketing); and legal obligation.

6. Encryption & security

MedFlux is designed around end-to-end encryption and zero-knowledge principles for protected messaging content. We apply access controls, transport encryption (TLS), least-privilege operations, and monitoring to protect systems. No method of transmission or storage is perfectly secure; please use strong credentials and keep devices protected.

7. Sharing

We share data only when necessary:

• With the clinicians, patients, or team members you intentionally connect to.
• With subprocessors that help host infrastructure, email, push notifications, or payments — bound by confidentiality and data-processing terms.
• When required by law, court order, or to protect rights, safety, and integrity of the Service.
• In a corporate reorganization, subject to equivalent protections.

8. Retention

We retain account and clinical records for as long as needed to provide the Service and meet medical, contractual, and legal retention duties. You may request deletion subject to those obligations and technical recovery limits for encrypted content.

9. International transfers

Data may be processed in the European Economic Area and other locations where our infrastructure or subprocessors operate. Where required, we use appropriate transfer safeguards.

10. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, and objection to certain processing, and you may withdraw consent where processing is consent-based. Contact admin@medflux.net. You may also lodge a complaint with your local supervisory authority.

11. Children

MedFlux is intended for clinicians and patients in care relationships. Children’s data is processed only as part of clinical use by authorized adults/guardians and treating professionals.

12. Changes

We may update this policy. Material changes will be posted on this page with an updated effective date. Continued use after the effective date constitutes acceptance of the updated policy where permitted by law.

13. Contact

Privacy inquiries: admin@medflux.net
Company site: lerensoft.com
Service: medflux.net