Privacy Policy

Local data, minimal exposure.

The policy is simple: data should remain close to the user, only be shared with permission, and never be routed through an unnecessary cloud service.

No central hosting

Health data stays local unless the deployment explicitly uses a local team setup.

User-controlled sharing

Patients and providers decide what leaves the local boundary.

Research after care

Aggregation happens only after privacy-preserving transformation.

Data Handling

Health data stays local for current users.

For independent users, patients, and small teams, New Loka is not a hosting service. It is a local or locally distributed application that keeps health data in the user's chosen environment.

Independent users

Records remain on the device or in the user's local storage environment. We do not receive routine copies of that data.

Small clinics and teams

Locally distributed deployments keep data inside the team's own infrastructure and access boundaries.

Future hospital hosting

If hosted services are introduced later, they will be separate, explicit, and governed by dedicated terms.

What We May Process

Data used to make the product work.

Depending on how the app is used, the system may process structured notes, uploaded images, message content, dictation transcripts, and user-entered metadata needed for search and retrieval.

  • Source material is preserved so users can review how a record was formed.
  • Only the data needed for the active workflow should be surfaced to the current user.
  • Any later hosted service would require separate disclosure and consent controls.

Retention and sharing

User-managed retention

Retention should follow the user's or institution's policy, not an opaque central platform rule.

Controlled sharing

Users decide when a record is exported, copied, or handed off into another system.

Research after care

Anonymization and aggregation happen after direct care decisions have been supported.

No surprise hosting

We do not silently migrate user health data into our own servers or services.