Privacy Policy

Juslokum & Healthpas Privacy Policy

Juslokum Clinic OS · Healthpas · Juslokum Vital

Last updated: 18 September 2026

IXCHEL CORPORATION (M) SDN BHD (“IXCHEL”, “we”) handles personal information through the Juslokum website, Juslokum Clinic OS, Healthpas and Juslokum Vital. This notice explains our practices under applicable data-protection law, including Malaysia's Personal Data Protection Act 2010 as amended.

1. Information we use

We receive information from you, authorized clinic staff, participating services and your use of our apps. The information depends on the features used:

  • Juslokum Clinic OS: staff accounts, patient identification and contact details, appointments, queues, clinical records and billing information support clinic administration and patient care.
  • Healthpas: account details, contact information, optional profile photos and available health records support your account and health features. With permission, Apple Health features read steps, heart rate, oxygen saturation and sleep. Apple Health data is not used for advertising or marketing.
  • Juslokum Vital: clinic-issued accounts, patient names and NRIC/passport numbers identify the correct visit. Staff-entered vital signs, height and weight are saved to that visit in the clinic system. Vital is a record-entry app and does not access Apple Health.

We also process support enquiries and technical records such as IP addresses, account or visit identifiers, service requests, timestamps, errors and response times to operate, secure and troubleshoot our services. Service-request information may appear in server logs.

2. Access and sharing

Information may be accessed by your clinic's authorized staff, IXCHEL support and operations personnel, and service providers for hosting, storage, authentication, app verification and website delivery. We may disclose information where required by law. External links are governed by the destination service's privacy terms. Vital has no advertising or cross-app advertising tracking.

Clinics determine how their patient records are used for care and administration; IXCHEL processes those records to provide the service. The clinic's privacy notice also applies. Using our apps does not authorize unrestricted sharing with other clinics.

3. Security and retention

We use authentication, access controls and encrypted service connections where implemented. No system guarantees absolute security. Service providers may process information outside your country; contact us for details of your deployment.

Retention depends on service needs, security and applicable clinical, contractual or legal requirements. Clinic records may need to remain after account closure, and backup copies may remain until their retention cycle ends. Uninstalling an app does not delete server or clinic records.

4. Your choices and deletion

  • Healthpas: use Delete Account in the profile area to initiate deletion, or contact IXCHEL for help. This does not automatically erase records your clinic must retain.
  • Clinic OS and Vital: contact your clinic administrator to remove staff access or request access, correction or deletion of patient records.
  • Permissions: manage camera, photo and Apple Health access in device settings. Contact us to request access, correction, deletion or withdrawal of consent. Some features require particular information to work.

We may verify your identity and explain any lawful limits on your request. Clinic apps are for authorized personnel; a parent or guardian should handle children's accounts or requests where required.

5. Contact and updates

For privacy requests, identify the app and clinic involved. Do not email passwords or unnecessary medical information.

IXCHEL CORPORATION (M) SDN BHD
Email: support@juslokum.com
Telephone: +6017-366 8225

We update this page when practices change and provide additional notice or seek consent where required.