Privacy Policy

SmileAiXl - AI-First Hospital Management System

Last Updated: December 18, 2025 | Effective: Immediate

Our Commitment

SmileAiXl operates on a Local-First Architecture with No-Cloud-AI guarantee, ensuring your patient data never leaves your infrastructure.

1. Introduction

SmileAiXl ("we," "our," or "us"), a product of Ghous E Azam Hospital, is committed to protecting patient and provider data. This policy outlines how we handle data within our AI-First Hospital Management System, specifically addressing our Local Processing and Passwordless architecture.

2. The "No-Cloud-AI" Guarantee (Local Processing)

Unlike traditional AI services, SmileAiXl operates on a Local-First Architecture

Data Egress

Patient health data (PHI), X-rays, and clinical notes are processed locally on your server using local LLMs (Ollama / Llama 3.3).

Third-Party AI

We do not send patient data to public AI APIs (OpenAI, Google, Anthropic). All "thinking" happens on your infrastructure.

Data Sovereignty

You retain full ownership and physical control of your database.

3. Biometric Data & Passkey Authentication

SmileAiXl utilizes Passkey (FIDO2/WebAuthn) technology for authentication.

We Do Not Store Biometrics

We never receive or store your fingerprint, face ID, or iris scan. These remain 100% encrypted within your hardware device (Apple Secure Enclave, TPM, or Android Keystore).

How it Works:

Your device performs the verification
Sends us a cryptographic token confirming identity
No biometric data ever transmitted

Important: Since we do not store passwords, we cannot "reset" a password. Access recovery relies on registered backup devices or administrative override.

4. IoT & Medical Device Data

Our Nexus Hub and Smart Chair integrations collect real-time operational data.

Collected Data:

Motor usage stats
Chair positioning logs
Real-time patient vitals (SpO2, BP, Heart Rate) via BLE integration

Usage:

Updating clinical dashboard in real-time
Predictive maintenance alerts
Automating chair positions based on procedure type

5. Security Measures

Encryption

All data at rest and in transit is encrypted using AES-256.

Tenant Isolation

Multi-tenant SaaS deployment with strict Row-Level Security (RLS).

6. Contact Information

For privacy-related questions or concerns, contact us:

Email: [email protected]
Phone: +91 9368997410
Address: Ghous E Azam Hospital, Bareilly, UP 243001

Back to Home Contact Us