SKOLY

Privacy Policy

Last Updated: September 2026

At SKOLY, protecting patient information and personal data is foundational. This Policy explains what data we collect, how we use it, how we protect it, and your rights. It is designed from day one to comply with the GDPR and to support healthcare organizations and Public-Private Partnerships operating across the MENA region and beyond.

1. Who We Are

SKOLY is the data controller for personal data processed through our website and platform (unless we act as a processor for a healthcare organization or partner under a Data Processing Agreement).

2. Information We Collect

  • Account and organization details
  • Clinical and operational data you upload or generate while using the platform (including imaging, lab results, prescriptions, and documentation)
  • Technical data needed to operate and secure the Service

3. How We Use Your Information

We use data solely to:

  • Provide and improve the SKOLY platform and its agentic capabilities
  • Deliver clinical decision support and operational intelligence
  • Maintain the highest standards of security and prevent misuse
  • Communicate with you about the Service
  • Comply with legal and regulatory obligations

4. Special Protection for Patient Information

Patient data is treated with heightened safeguards. We apply encryption, strict access controls, data isolation, and purpose limitation. Identifiable patient data is never used to train models in a way that could re-identify individuals. De-identified and aggregated insights may be used to improve the platform.

We do not sell personal or patient data.

5. Your Rights (GDPR)

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. You may also withdraw consent where applicable and lodge a complaint with a supervisory authority.

To exercise your rights: privacy@theskoly.com

6. Data Retention

We keep personal and patient-related data only as long as necessary to provide the Service and meet legal or clinical record-keeping requirements. De-identified and aggregated data may be retained longer to improve the platform.

7. Security

We use end-to-end encryption, strict data isolation, granular access controls, and infrastructure aligned with SOC 2, ISO 27001, and GDPR Articles 25 and 32.

8. International Transfers

When data is transferred outside the EEA or your local jurisdiction, we apply appropriate safeguards such as Standard Contractual Clauses or equivalent protections suitable for MENA and African regulatory environments.

9. Changes

We may update this Policy. The latest version will always be available here.

10. Contact

privacy@theskoly.com