PRIVACY
Privacy Policy
Choose your app
Tenso privacy policy — offline creative play, local preferences, optional image sharing and research links.
Quran Dictionary privacy policy — offline reading, online content providers and external sources.
CRS privacy policy — clinical sessions, subscriptions and optional AI processing, detailed below.
App policy links updated 20 September 2026. The CRS policy below is dated 18 September 2026.
Clinical Reasoning System (CRS)
Last updated: 18 September 2026
This policy explains how CURITEX Ltd handles information in its website and the Clinical Reasoning System (CRS), a professional clinical reasoning and reference-support app. It supplements the permission notice shown inside CRS before optional third-party AI processing.
Information kept on your device
CRS keeps the clinician profile, clinical sessions and your AI-sharing choice on your device. Clinical sessions are removed after 48 hours from creation when the app next checks its local records; closing the app does not remotely erase them. You can delete sessions in the app. Device backups and any drafts you export or share are handled by your device settings and the recipients you choose.
Subscription and technical information
To check subscription access, the CRS gateway receives a random installation identifier and App Store transaction and product identifiers. Network requests also expose technical information such as an IP address. CURITEX uses this information to verify access with Apple, operate and secure the service, investigate failures, and respond to support requests. Apple handles App Store payments; CRS does not receive your payment-card details. Subscription identifiers are not added to the clinical prompt sent to OpenAI.
Optional AI processing: who receives information
CURITEX Ltd operates the CRS gateway on Cloudflare. When you choose Allow AI processing, relevant case text is processed by Cloudflare and sent to OpenAI's API to refine clinical reasoning and produce editable communication drafts. The app asks for this permission before an AI request. You can choose Continue without AI and still use local structured review, scores and locally generated drafts. Subscription access checks may still contact the CRS gateway.
What an AI request can contain
An AI reasoning request can contain the clinical narrative, including dictated text; age; observations and blood results; examination and imaging descriptions; selected findings and clarification answers; clinical setting and available services; and relevant locally generated reasoning and references. A communication-draft request can also contain the recorded management plan, patient or family and multidisciplinary discussions, operation or procedure details, postoperative course, discharge and follow-up information, and additional clinical notes.
The AI request does not include raw microphone audio, photographs, contacts, precise device location, or the separately stored clinician profile. Dictated words become case text and can be sent when you allow AI processing.
Your choice and patient confidentiality
Your AI choice applies to later requests on that device until you change it. You can withdraw permission in Account → AI data & privacy; this stops future AI requests and cancels app-side transfers still in progress. It cannot recall information already received by a provider or erase copies you have exported.
Do not enter names, NHS or hospital numbers, contact details or other direct identifiers. CRS uses pattern-based filtering before AI transfer, but this may miss identifiers and does not guarantee anonymity. Clinical details can remain sensitive or identifiable. Use CRS only with information you are authorised to share under your organisation's rules and applicable law. Your in-app choice does not replace any patient consent or other lawful authority that may be required.
Retention, security and international processing
Clinical information sent for AI processing passes through third-party infrastructure and may be processed outside the UK. CURITEX requires its CRS processors to provide privacy and security protections at least equivalent to those described here, use information only for the disclosed purposes, and apply confidentiality, security and transfer safeguards. Operational and security records may be kept to verify access, prevent misuse, investigate failures and meet legal obligations.
Under standard OpenAI API controls, abuse-monitoring logs can contain content and may be retained for up to 30 days, subject to documented exceptions. Response storage, Cloudflare log retention and any OpenAI account-specific controls depend on CURITEX's production configuration. Contact us for details of the current settings.
Provider information: OpenAI API data controls, OpenAI data-processing terms, and Cloudflare data-processing terms.
Website and support enquiries
The CURITEX website is primarily informational. Its hosting provider processes technical requests needed to deliver and protect the site. If you contact support, CURITEX uses the details and message you provide to respond to you and manage the enquiry.
Some CURITEX website pages load fonts from Google Fonts. This sends a request, including technical information such as your IP address, to Google’s font service. These website font requests are separate from Tenso’s offline app experience. See Google Fonts privacy information.
Your rights and contact
Depending on applicable data-protection law, you may have rights to access, correct, delete, restrict, object to or obtain a copy of your personal information. For a privacy request or information about data previously processed, email curitexco@gmail.com. Apple manages App Store subscriptions and certain Apple account information through its own services.