Privacy notice

When you submit the inquiry form, the request is encrypted and stored in Carenomi's private owner dashboard for response and follow-up. You may also open your own email draft or WhatsApp message.

The initial inquiry collects your name, contact details, site language, destination and practical support needs. You may add your city, patient status, dates, known hospital and preferred contact time. Do not enter passport numbers, detailed diagnoses, full records or imaging files in this public form.

Inquiry content is encrypted with AES-256-GCM before server storage. It has no automatic expiry and is retained until it is no longer needed, you request deletion, or the owner deletes it. The browser stores your interface language and a short-lived analytics session identifier. Member cookies are described separately below; they are not cross-site advertising identifiers.

Inquiry data is used to reply, coordinate and follow up on the requested service. Additional medical or identity documents must be shared only through a separately agreed channel and within the patient's authorisation. Email hello@carenomi.com to request access, correction or deletion.

For security, operational auditing and site improvement, we record access time, requested page, full IP address, browser/device information, referrer, language, approximate country/region/city and relevant website or dashboard actions. Full IP addresses and the unified access audit are encrypted on the server, have no automatic expiry and cannot be deleted from the dashboard. Earlier analytics records may contain only a masked network range. Inquiry text is not copied into access logs, and approximate location may be incorrect.

Patient accounts & health information

Patient registration requires email verification, a password and account consent. The account may contain contact details, language, birth year, visit preferences, a brief condition summary, support needs and two-way coordination messages. Every profile save requires a separate, explicit health-data consent. Share only what is needed for the requested non-clinical coordination; do not send full records, identity documents or payment credentials in the portal. Account and message data are separate from the 90-day member visit-detail retention rule.

Verification codes are delivered by email when external delivery is configured. In local review mode, no verification email is sent externally; local mail is available only to the backend owner in the admin area and is removed after 24 hours. Codes are not returned by the patient API or displayed in the patient portal.

Member sessions & optional cookies

A necessary first-party session cookie signs you in, with an 8-hour server-side session lifetime. Choosing “Keep me signed in” creates a persistent login cookie lasting up to 30 days. Signing out ends the current session. Resetting your password invalidates that account's existing sessions and clears the current login cookie. These cookies are managed by the server, not browser local storage.

Signed-in visits can be associated with your account, including time, page path, IP address and referrer hostname. Detailed member visit records are retained for 90 days; the aggregate visit count and most recent visit time remain on the account. An optional first-party device-recognition cookie can last up to 180 days and is used only with your cookie preference enabled. Turning this preference off removes that cookie; it does not disable signed-in visit recording or the separate access audit. It is not cross-site advertising tracking. You can change this preference in the patient portal.

Referral attribution & disclosure

Opening a referral link may set a first-party first-touch attribution session cookie. Its corresponding server attribution record is valid for up to 30 days; the cookie itself is not a 30-day persistent cookie. Registration consumes and clears the attribution cookie. Referral click records may include IP address, time and referring hostname for review. Private shares may omit the referrer, and clicks alone do not guarantee attribution or commission. Referrers see counts, anonymous referral references and commission status, not another patient's email, health information or IP address. Qualification requires the referred patient's name, support needs, explicit health consent and owner review.

The 90-day member visit-detail rule does not apply to the existing unified access audit, inquiry records, account and message data, or referral and commission records. The existing unified access audit remains separately retained without automatic expiry, as described above. Contact us about access, corrections or deletion.

These data-handling arrangements require applicable legal and contractual review before public launch and accepting bookings. This notice is not a booking agreement or a guarantee of legal compliance.