Last updated: October 2026
1. Who controls your data
Krinex is a product of Flytohealth Kft. (“Krinex”, “we”, “us”).
Data controller:
Flytohealth Kft.
Registered office:
1037 Budapest, Táborhegyi út 16.
G. ép. Fsz. 3. ajtó
Hungary
Company registration number:
01-09-436151
Privacy contact:
contact@krinex.ai
2. What this Notice covers
This Notice applies when you use Krinex Clinical public medical intake, secure document upload, patient or case workflows, and related clinical-review services.
Krinex Clinical is a clinical intelligence and information-preparation platform. It supports clinical review workflows and does not replace emergency medical care or the professional judgment of an authorized clinician.
Corporate website enquiries
This Notice also applies when you contact Krinex through the public Krinex.ai website, including requests for a demonstration, clinical workflow discussions, controlled pilots, integration, research, partnership or general enquiries.
In these cases, Krinex may process the contact and professional information you provide in order to receive, route, respond to and maintain an appropriate record of the enquiry.
3. Information we may process
Depending on the service or workflow you use, we may process:
- identity and contact information, including name, email address, telephone or WhatsApp number, country and relevant account identifiers;
- demographic and clinical-context information submitted through an intake process;
- information concerning health, including symptoms, diagnoses, medical history, medications, allergies, previous procedures and treatment goals;
- medical reports, laboratory results, imaging and other documents you choose to provide;
- case, referral and partner-link information required to route and administer the case;
- communications and workflow records;
- technical, security and audit information required to operate and protect the service.
Health information is a special category of personal data under the GDPR.
4. Why we process information
We may process information to:
- receive and administer a clinical intake or case;
- organize and analyse submitted information and documents;
- reconstruct relevant clinical context and identify missing, conflicting or uncertain information;
- prepare information for authorized clinician review;
- support care coordination and case workflow management;
- allow clinicians or authorized reviewers to request additional information where required;
- prepare, review and deliver clinician-approved outputs;
- maintain security, audit trails, service integrity and operational records;
- comply with applicable legal and regulatory obligations.
5. Legal basis and explicit consent for health data
Where consent is the applicable legal basis for a Krinex Clinical intake workflow, personal data may be processed on the basis of consent under Article 6(1)(a) GDPR.
Where information includes data concerning health, Krinex may request explicit consent under Article 9(2)(a) GDPR.
Certain limited processing may also be necessary to comply with legal obligations, protect the security and integrity of the service, establish or defend legal claims, or meet other lawful requirements where applicable.
Consent may be withdrawn for future processing by contacting:
Withdrawal does not affect processing that was lawful before consent was withdrawn. Certain information may still need to be retained or processed where another applicable legal basis or legal obligation applies.
6. AI-assisted processing and human oversight
Krinex Clinical may use AI-assisted tools to help extract, structure, organize and analyse information contained in intake forms and submitted medical documents.
AI-assisted processing may help identify relevant information, chronology, relationships, uncertainty, missing information and information requiring human attention.
AI-assisted output does not by itself constitute a final medical decision.
Clinical interpretation, verification, editing, approval and professional responsibility remain with the authorized clinician or other responsible human reviewer within the relevant workflow.
For further information, see the AI-Assisted Processing Notice.
7. Who may receive or process your information
Access is limited according to role and workflow need.
Depending on the relevant case or service, information may be accessible to:
- authorized Krinex personnel involved in operating or supporting the service;
- the authorized clinician or clinical reviewer assigned to the case;
- a referring healthcare or partner organization where the case originated through that organization's agreed workflow and disclosure is required for that workflow;
- contracted technology and service providers supporting hosting, secure storage, communications, document processing, AI-assisted processing, security and platform operations.
Service providers operate under contractual and data-protection obligations appropriate to their role.
8. International data transfers
Some contracted technology providers may process personal data outside Hungary or the European Economic Area.
Where GDPR transfer restrictions apply, Krinex will use an applicable lawful transfer mechanism and appropriate safeguards, such as an applicable adequacy decision or Standard Contractual Clauses where required.
9. How long we keep information
Personal and clinical information is retained only for as long as necessary for the purposes for which it is processed, including the relevant clinical-review workflow, service continuity, security, audit requirements, dispute handling and applicable legal obligations.
Retention is reviewed according to the nature of the information, the purpose of processing and applicable legal or contractual requirements.
10. Security
Krinex uses technical and organizational safeguards intended to protect personal and health information, including controlled access, secure links, role-based authorization, auditability and appropriate security controls within the platform and its contracted services.
No internet-based service can guarantee absolute security.
11. Automated decision-making
Krinex Clinical is designed as a human-reviewed workflow.
AI-assisted processing may support information preparation and clinical review, but the platform is not intended to make solely automated final medical decisions about an individual without meaningful human involvement.
12. Your rights
Subject to the GDPR and applicable law, you may have rights to:
- access your personal data;
- request correction of inaccurate or incomplete information;
- request erasure where applicable;
- request restriction of processing;
- object to certain processing;
- receive personal data in a portable format where applicable;
- withdraw consent where processing is based on consent;
- lodge a complaint with a competent data-protection supervisory authority.
To exercise a privacy right, contact:
You may also contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or another competent supervisory authority where applicable.
13. Partner-referred cases
Where a person enters Krinex Clinical through a secure referral or partner workflow, relevant referral information may be used to associate the submitted case with that organization for case administration and care-coordination purposes.
Depending on the specific contractual and operational arrangement, the referring organization may act as a separate controller, joint controller or recipient of information.
The applicable roles and responsibilities should be defined for each partner arrangement.
14. Changes to this Notice
We may update this Notice as Krinex Clinical, its processing activities, service providers or applicable legal requirements change.
The current version and effective date will be published on this page.
Contact:
contact@krinex.ai