Privacy Policy

Last updated: 5 July 2026

HelenisCare (“the Service”), operated by SamKis Labs (“we”, “us”), connects patients with their healthcare providers and helps clinics coordinate care. This policy explains what information we collect, how it is used, and how it is protected. Contact us at contact@samkislabs.com.

Information we collect

• Account data — your name, contact details, and the login used to access your portal.
• Health information (PHI) — the medical records, appointments, prescriptions, triage and clinical notes, and related data created or held by your provider through the Service.
• Consent & access records — which providers you have granted access to, and a history of access for transparency.
• Billing data — for provider/clinic subscriptions, tier and status. Card details are entered directly with our payment processor and are never stored on our servers.
• Technical data — standard server logs and session information needed to run and secure the Service.

How we use your information

We use your information to provide and secure the Service, enable your providers to deliver and coordinate care, manage your consent and access controls, process provider subscriptions, and respond to support requests. We do not sell your data, and we do not use your health information for advertising.

Who can see your records

You control which providers can access your records. You can grant a provider standing access, allow one-time access, and revoke access at any time from your portal’s privacy settings. We act as a data processor for your providers; they are the controllers of the clinical records they create.

Service providers (sub-processors)

• Supabase — authentication and database hosting for your account and records.
• Vercel — application hosting and delivery.
• Stripe — subscription billing and payment processing.
• Resend — delivery of transactional email (e.g. confirmations, notifications).

Data retention

Health records are retained in line with the medical-record obligations of your provider and applicable law. You may request access to, correction of, or deletion of your data — for clinical records, requests are handled together with your provider.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. Email us to exercise these rights and we will respond within a reasonable time.

Not a substitute for medical care

HelenisCare supports the delivery of care but is not itself medical advice. In a medical emergency, contact your local emergency services immediately.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.