Privacy policy

Our role

• Visitors to this site and people who ask for a demo: we are the controller of your data.
• Clinic owners and staff with a login: we are the controller of your account data.
• Patients who talk with Sunny on a clinic's page: that clinic is the controller, and we process the data on its behalf. For questions or requests about your data, contact the clinic first; we help the clinic carry them out.

The talktosunny.com site

• Demo form: your name, clinic name, city, number of outlets, WhatsApp number, email (optional) and message, plus how you reached the site (campaign tags in the link, the site before ours, the first page you opened). We use it only to contact you about TalkToSunny and to prepare the demo. Requests in Bahasa Indonesia are stored on Google Cloud in Singapore, in English in the United States.
• Google Analytics: pages viewed (with any campaign tags in the link), approximate country and city, type of device, and buttons clicked (sign up, WhatsApp, form sent). No names, numbers or messages are sent to Analytics. Outside Europe, the UK and Switzerland, Analytics uses cookies (_ga); there, it runs without cookies. You can block cookies in your browser or install the Google Analytics opt-out add-on.
• Fonts from Google Fonts, so your browser connects to Google's servers.
• This site has no advertising pixels and sells no one's data.

Clinic accounts

• When signing up: clinic name, country, plan, email and password (handled by Google's Firebase Authentication; we can't see your password).
• For each staff member: email, role and dashboard language. Verification and password reset emails are sent by Firebase.
• Cookies: __session to stay signed in (7 days) and sunny_lang for the dashboard language (1 year). Both are needed for the dashboard to work.
• Clinic settings: menu and prices, branches, WhatsApp or SMS number, logo and the assistant's look.

Patients who talk with Sunny

Before starting, patients agree that Sunny is an AI, that the result is not a diagnosis, that the camera and microphone are used during the consultation, and that their photos and result go to the clinic if they sign up.

• The conversation: while the call is open, sound from the microphone goes straight from the browser to Google's AI (Gemini) so Sunny can hear. Images from the camera (about one per second) are sent only during the photo step, while the camera is on screen. We don't record or keep the audio, the video or a transcript.
• Three face photos and the questionnaire answers (main concerns, how the skin feels, sensitivity, pregnancy if mentioned, budget, past treatments) are sent to Google's AI for analysis. The result is findings by area of the face and a price range from the clinic's menu.
• If the patient doesn't sign up, the photos and the result are kept for 30 days so they can come back and sign up when they're ready, then deleted. Patients can delete them sooner from the result page.
• When signing up: name and WhatsApp number (or mobile number, for clinics that use SMS), and consent to be contacted by the clinic. The photos, answers and result go to the clinic for the patient's consultation, so the provider has a picture. Patients are told this before the photos and before signing up.
• Bookings (branch, date, time), visit status, the provider's note and final price entered by the clinic, and vouchers. When a voucher is passed on, we keep the friend's first name as typed by the patient, not their number.
• WhatsApp and SMS messages are sent from the clinic's or the patient's own phone. We don't send messages on anyone's behalf.
• Patients get no cookies. The patient's browser keeps a pointer to their last result (not the photos) for 30 days, so they can get back to it on the same device.

Where data is kept

Each clinic's data, and its patients', is kept on Google Cloud in the clinic's region: Singapore for Indonesia, the United States for the US, Belgium for the UK, Ireland and the EU, Sydney for Australia. The list of clinics (no patient data) is kept in the United States. Analysis by Google's AI may be processed outside these regions. For these transfers we rely on Google's contractual and security safeguards.

Who can see it

• The clinic's staff with a login, in the clinic's dashboard. Photos open only in the dashboard, after signing in.
• The TalkToSunny team, for support, billing and security, and only as far as needed.
• Google as our service provider: Firebase Hosting, Cloud Run, Firestore, Cloud Storage, Firebase Authentication, the Gemini API, Google Analytics and Google Fonts.
• Authorities, only where the law requires it.

How long

• Consultations without sign-up: deleted after 30 days, or sooner if the patient deletes them.
• Data of patients who signed up: for as long as the clinic uses TalkToSunny, unless the clinic or the patient asks for it to be deleted sooner.
• When a clinic leaves: it can download its data (CSV), then we delete the clinic's and its patients' data within 90 days.
• Demo requests: for as long as they're relevant to follow up; ask us to delete yours at any time.
• IP addresses used to limit abuse are kept scrambled (hashed) and deleted when their time window ends.

Security

Every connection uses HTTPS, and Google encrypts stored data. Browsers can't read the database or the photo storage directly; everything goes through our server, which checks the login on every request. Each staff member has their own login, and the clinic owner can revoke it at any time.

Your rights

Depending on the law that applies to you, including Indonesia's Personal Data Protection Law (No. 27 of 2022), the GDPR and UK GDPR, and US state privacy laws, you can ask for a copy of your data, correct it, delete it, restrict its use, or withdraw consent. We reply as soon as we can and within the time the law sets. Patients should contact the clinic first.

Children

TalkToSunny is made for adults. This site is not meant for children under 18.

Changes and contact

If this policy changes, we update the date above and email clinics about important changes. Questions or requests: ibrahim@cendra.co or WhatsApp +62 812-1060-3386.