Terms of Service · Uvjeti korištenja
Last updated: 1 October 2026
CliniAtlas is operated by DiscensMachina for literature search, education, and professional evidence review. It is not intended for diagnosis, treatment selection, triage, monitoring, prognosis, or patient-specific clinical decision-making.
CliniAtlas uses sign-in data such as email address, account identifiers, and session tokens to authenticate users and protect access. The app stores chat titles, user questions, generated answers, source metadata, timestamps, and attachment metadata so signed-in users can review their previous evidence searches.
Signed-in users may attach images to Fast or Full chat. Images are stored in encrypted EU AWS storage, sent to the selected AWS Bedrock model to create the answer and search context, and configured to expire after 30 days. Users should not upload names, identifiers, or other unnecessary personal data. Image chat is for professional evidence discussion and is not a diagnostic medical-imaging service.
If a user submits a medical ID, professional registration number, diploma, or credential image for verification, the data is used only to assess professional access eligibility. Credential images are stored in EU AWS infrastructure and configured to expire after 24 hours.
The application and stored service data are hosted in AWS eu-central-1 (Frankfurt). AI processing is not restricted to the EU: the current GPT-6 route uses AWS Bedrock global inference and may process questions, relevant conversation context, attachments, and retrieved source excerpts outside the EU. Literature and web retrieval services receive search terms, not CliniAtlas account credentials.
When a user exports a completed answer or Deep Research result, CliniAtlas creates the PDF or Word file on demand from the already saved answer and source metadata. The generated download is returned directly to the user and is not stored as a separate report file by CliniAtlas. The user controls copies saved or shared from their device.
Chats and saved reports remain available until the user deletes the account. Deep research working files expire after 180 days. Credential images and verification review records are configured to expire after 24 hours. Chat image objects expire after 30 days. Security and access logs are retained for limited operational periods, up to 365 days for production access logs.
AWS provides application hosting, authentication, storage, and model inference; inference locations can differ from the EU storage region. Google and Apple process information when their optional sign-in methods are used. PubMed, Europe PMC, guideline, regulatory, and web-search services process evidence search terms.
CliniAtlas records timestamps, request outcomes, account identifiers, quota usage, and infrastructure access information to operate the service, prevent abuse, investigate failures, and understand aggregate product usage. These records are not used for advertising or cross-app tracking.
After sign-up, CliniAtlas asks how you heard about the service and which country you work or study in. Both answers are optional. They are stored with your account together with the referring website, the first CliniAtlas page you opened, and any campaign tags in that link. The browser keeps those three values only for that tab's visit. We use this record to learn which channels bring clinicians who keep using CliniAtlas, report it only in aggregate, never use it for advertising, and delete it with your account. The professional role and specialty asked at sign-up are counted anonymously and are not stored with your account.
The public landing-page trial processes the submitted question but does not add it to a CliniAtlas chat history. To enforce the two-question allowance and prevent automated abuse, CliniAtlas stores a pseudonymous browser identifier for up to 30 days and a salted one-way hash of the source network for up to three days. The quota record does not store the raw IP address.
AI assistants such as ChatGPT can call CliniAtlas tools. When they do, the assistant sends CliniAtlas the question and, in ChatGPT, an anonymized user identifier that OpenAI creates for rate limiting. CliniAtlas uses the question to search the evidence and write the answer, as described above, but does not add it to a chat history or link it to a CliniAtlas account. To enforce the daily free allowance, CliniAtlas stores a one-way hash of that identifier (or, for searches sent without one, of the network address) with the date and whether the answer completed, and deletes these records after seven days. Unfinished answers are held in memory for up to an hour so the assistant can collect them. Links in the results carry campaign tags naming the assistant, such as utm_source=chatgpt, so we can count visits that come from assistants; they contain no personal data. The assistant provider's own privacy terms also apply to what you type there.
Users can permanently delete their account and associated chats, chat attachments, reports, verification records, quota records, and sign-in identity from the mobile app or the account deletion page. For access, correction, or other privacy requests, contact hello@discensmachina.com.