Privacy Policy and Terms of Use

Last updated: 30 May 2026

This document describes how PureKiosks ("we", "our", "us") handles personal information and the terms under which our platform may be used.

Acronyms used:

• PMS: Practice management system

Our platform provides:

• a patient check-in kiosk application used in healthcare clinics, and
• a web portal used by clinics to manage kiosks and integrations with their practice management systems.

By using the portal, creating an account, or using the kiosk, you agree to this policy and these terms.

1. Roles and Responsibilities

   Healthcare clinics use our platform to facilitate patient check-in.

   The clinic remains responsible for managing patient records within its practice management system.

   Our platform acts as a technical service provider that processes limited information in order to enable kiosk check-in and platform functionality.

   Patients seeking access to or correction of their personal information should contact the clinic directly.

2. Information we collect from kiosk users, and how we collect it

   When a patient uses a kiosk to check in for an appointment, the system may collect one or more of their:

   • mobile phone number
   • email address
   • date of birth
   • first and last name

   When a patient enters one or more of the above information into the kiosk, the system may collect from the clinic's practice management system:

   • appointment details
   • appointment check-in status
   • patient's PMS identifier number

   This information is shared with the clinic's practice management system in order to identify the patient's appointment and mark them as arrived.

   This information is not permanently stored, with the exception of technical system logs which store only the patient's PMS identifier and appointment's PMS identifier, and are not available to kiosk or portal users.

   The kiosk does not access or display medical records or clinical notes.

3. Information we collect from portal users, and how we collect it

   When clinic staff creates a portal account, we collect and store their:

   • email address
   • password (stored securely in hashed form)

   When a portal user connects PureKiosks to their practice management system and sets up a kiosk, we collect and store:

   • clinic or company name
   • practice management system API credentials
   • company logo (optional)
   • kiosk configuration settings
   • account login activity and product usage information

   Portal users are responsible for ensuring that they have authority to provide any API credentials or integration access.

4. Technical and usage information

   We may collect limited technical information necessary to operate the platform, such as:

   • kiosk usage events
   • technical system logs

   Technical system logs only identify a patient by their PMS identifier, which is uniquely used by the clinic's PMS.

   This information is used to maintain the reliability and security of the platform.

5. Purpose of Collection

   We collect and use information for purposes including:

   • identifying patient appointments
   • enabling patients to check in for appointments
   • notifying clinics of patient arrival
   • authenticating portal users
   • managing kiosk devices and configurations
   • enabling integrations with practice management systems
   • providing support and maintaining system security.

   We do not use patient information for marketing purposes.

6. Storage and Retention

   Our platform is designed to minimise storage of patient information.

   Patient appointment data retrieved during kiosk use is processed temporarily and not stored on kiosk devices.

   Portal account information may be retained while an account remains active and for a reasonable period afterwards for operational, legal, or security purposes.

   API credentials provided by clinics are stored securely and used only to facilitate integration with the relevant practice management system.

7. Cookies

   Cookies are small text files stored in the user's web browser.

   We store and transmit cookies between our servers and the client's browser for identity verification purposes only.

8. Disclosure of Information

   We may disclose:

   • kiosk users' personal information outlined in "Information we collect from kiosk users, and how we collect it" to the clinic's practice management system to update appointment status
   • portal users' email address and company information outlined in "Information we collect from portal users, and how we collect it" to infrastructure providers who host or operate the platform

   We do not sell personal information.

9. Security

   We take reasonable technical and organisational measures to protect information, including:

   • encrypted communications between devices and servers
   • secure storage of integration credentials
   • access controls within the portal
   • automatic kiosk session resets
   • monitoring and logging of system activity

   Despite these measures, no electronic system can be guaranteed to be completely secure.

10. Access and Correction

    Patients should contact the relevant clinic to access or correct personal information contained in patient records.

    Portal users may request access to or correction of their account information by contacting us.

11. Account Responsibilities

    Portal users must:

    • maintain the confidentiality of their login credentials
    • ensure that information provided when creating an account is accurate
    • ensure they have authority to configure integrations and API credentials.

    Users are responsible for all activity that occurs under their account

12. Acceptable Use

    Users must not:

    • attempt to access accounts or data belonging to other users
    • interfere with the operation or security of the platform
    • attempt to reverse engineer the platform
    • misuse integrations with practice management systems.

    Patients using kiosks may only use the kiosk to check in for their own appointments.

13. Availability of Service

    We aim to maintain reliable service but cannot guarantee that the platform will always be available.

    The platform may occasionally be unavailable due to maintenance, technical issues, or circumstances outside our control.

14. Limitation of Liability

    To the extent permitted by law, we are not liable for indirect, incidental, or consequential loss arising from the use of the platform.

    If a kiosk fails to locate or check in an appointment, patients should notify clinic staff.

    Nothing in these terms limits rights that cannot be excluded under applicable law.

15. Third-Party Integrations

    Our platform integrates with third-party practice management systems.

    We are not responsible for the operation, security, or availability of third-party systems.

    Clinics are responsible for ensuring that any API credentials provided are authorised and valid.

16. Changes to This Policy

    We may update this policy from time to time.

    Updated versions will be published on our website and will take effect once published.

17. Contact

    If you have questions about this policy or the platform, or wish to lodge a complaint, please contact:

    PureKiosks

    Email: info@purekiosks.com