Skip to content

Privacy Policy

Last updated: August 2026

1. Data controller

The data controller for personal data collected through Citria is Touch of Tech, reachable at hello@touchof.tech. Citria is a WhatsApp-based medical scheduling platform operated by Touch of Tech.

2. Data we collect

We collect the following personal data:

  • Clinic data: business name, WhatsApp Business number, email address, and doctor and schedule configuration.
  • Patient data: name, phone number, and messages exchanged with the Noa assistant to manage appointments.
  • Usage data: activity logs within the Citria web dashboard to ensure the service works correctly.

We do not collect medical records, diagnoses, or sensitive health information. Citria manages scheduling information only.

If a doctor enables the optional Google Calendar integration, appointment data — including the reason for the visit, where recorded — is additionally sent to their Google Calendar. See section 6.

3. Purpose of processing

Data is used exclusively to:

  • Provide the automated WhatsApp scheduling service.
  • Send appointment confirmations, reminders, and updates to patients.
  • Display appointments and conversations in the clinic's web dashboard.
  • Improve and maintain the platform.

4. Legal basis

Processing is based on consent and on the performance of the service contract between Citria and the clinic. Patient data is processed on behalf of the clinic, which acts as the controller toward its own patients.

5. Third parties and subprocessors

To provide the service, we share data with:

  • Meta (WhatsApp Business API): messages are transmitted through Meta's infrastructure under their own policies.
  • Cloud infrastructure providers: for data storage and processing in regions with adequate protection standards.
  • Google LLC: only when a doctor connects their Google Calendar, to create the clinic's appointments on it. See section 6.
  • Anthropic PBC (Claude API): provider of the language model behind the Noa assistant. It receives the WhatsApp conversation messages and the clinic scheduling data needed to reply. We use Anthropic's paid commercial API service, whose terms state that Anthropic does not train its models on customer inputs or outputs. Data obtained from Google APIs is never transmitted to this provider (see section 6).

We do not sell personal data to third parties or use it for advertising purposes.

6. Google Calendar integration

Citria offers an optional Google Calendar integration. It is enabled only when a doctor explicitly connects it from the dashboard; no account is ever connected automatically.

The scope we request. Only https://www.googleapis.com/auth/calendar.events — the minimum needed to place Citria appointments on the doctor's calendar. We do not request access to Gmail, Drive, Contacts, or any other Google service.

What we do with it. We create, update, and delete only the events Citria itself generates from clinic appointments; each is tagged internally with its appointment id. We do not read, download, import, or analyse the doctor's existing calendar events. Booking availability is always calculated inside Citria — working hours, service durations, and blocked dates — never from Google.

What is sent to Google. Creating an event transfers the patient's name, the service, the reason for the visit where recorded, a contact reference, the appointment id, and the date, time, and timezone. By connecting a calendar, the doctor and the clinic authorise this transfer. Once in Google Calendar, that information is also governed by Google's Privacy Policy.

What we store. Access credentials (tokens) in our cloud provider's encrypted secrets store, together with the connected Google account's email address and identifier, the calendar id, and the last sync timestamp. We do not store the contents of the doctor's calendar.

Google data and artificial intelligence. Data received from Google APIs — raw, aggregated, or derived — is never transmitted to our artificial-intelligence provider or to any other AI/ML service, and is never used to create, train, or improve artificial-intelligence models, whether our own or a third party's. The Noa assistant operates solely on the WhatsApp conversation and the data the clinic keeps inside Citria; no Google-derived data forms part of its context. The Google Calendar flow is one-directional: Citria writes events to the calendar and reads nothing from it.

What we never do. We do not sell this information, use it for advertising or profiling, or transfer it to parties other than Google and our infrastructure providers. No one at Touch of Tech reads this data except where strictly necessary to resolve a support issue reported by the clinic, to comply with the law, or for security reasons.

Revoking access. A doctor can disconnect at any time from Doctors → Calendar → Disconnect. We then revoke the token with Google and delete the stored credentials. Access can also be revoked at myaccount.google.com/permissions. Appointments already created remain on the calendar and can be deleted from Google Calendar.

Limited Use. Citria's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data retention

Data is retained while the clinic maintains an active Citria account and, after cancellation, for up to 12 additional months for legal and audit purposes. After that period, data is securely deleted. Google Calendar credentials are the exception: they are revoked and deleted immediately when the integration is disconnected or the account is cancelled.

8. Your rights

You have the right to access, correct, delete, or object to the processing of your personal data. To exercise these rights, email us at hello@touchof.tech with your request. We will respond within 20 business days.

9. Security

We implement reasonable technical and organizational measures to protect data against unauthorized access, loss, or alteration. Credentials for third-party services such as Google Calendar are held encrypted in a dedicated secrets store and are never exposed in the web dashboard.

10. Changes to this policy

We may update this policy at any time. We will notify you of material changes by email or via a notice in the Citria dashboard with at least 15 days' notice.

11. Contact

For any questions about this policy, email us at hello@touchof.tech.