Privacy policy

Effective October 29, 2026

This page explains what data MedDesk processes, why, and how to delete it. A separate section covers connecting Instagram and Facebook to the program.

1. Who we are

MedDesk is software for private clinics. It is developed and supported by the MedDesk team in Bishkek, Kyrgyzstan, referred to below as “we”. Contact us at support@meddesk.kg or +996 702 129 888.

2. Whose data this is

A clinic that works in MedDesk decides what patient information to keep and is responsible for it. We process this data on the clinic's behalf, under our contract with the clinic and a data processing agreement.

If you are a patient and want to see, correct or delete your data, contact the clinic. You can also write to us, and we will pass your request on to the clinic.

3. The meddesk.kg website

The website sets no cookies, uses no analytics or counters, and loads nothing from third-party addresses. It has no forms. The website is hosted by Cloudflare: like any host, Cloudflare receives technical details of requests, such as IP addresses, and uses them to deliver and protect the website.

4. The MedDesk software

The program and the clinic's database run on a computer inside the clinic. To update the program, check its license and restore data after a failure, the program sends to our server in Kyrgyzstan:

• information about how the program is working: its version, errors and the state of the server computer. Error messages sometimes contain data from the database — we use it only to fix the errors;
• a copy of the clinic's database — to restore the data if something happens to the clinic's computer, and for other purposes set out in our contract with the clinic.

5. Instagram and Facebook

A clinic can connect its Instagram professional account and Facebook Page to MedDesk and answer messages from the “Chats” section. A clinic employee connects them in the Meta login window, which shows what access they are granting.

From Meta we receive:

• the name, ID and profile picture of the clinic's Instagram account or Facebook Page, and an access token for it;
• the messages people send to the clinic in Instagram Direct and Messenger, and their attachments: photos, videos, voice messages, files;
• the name, username, ID and profile picture of the people who write to the clinic — whatever Meta sends along with a message.

We use this data for one purpose only: to show the conversations to the clinic's staff in MedDesk and to send their replies. We do not use it for advertising, analytics or training artificial intelligence, we do not sell it, and we do not share it with anyone except Meta, through which the clinic's replies are sent.

Where the data is stored:

• conversations and attachments are stored on the clinic's computer. A copy of the conversations, without attachments, is part of the copy of the clinic's database on our server (section 4);
• new messages from Meta first arrive at our server and are passed on to the clinic's computer. We keep them only until they are passed on, and no longer than 14 days;
• the access token is stored encrypted and is used only to receive and send messages.

Conversations are visible to the clinic staff whom the clinic has given access to the “Chats” section. We open conversations only if the clinic itself asks us for help with them.

A clinic can disconnect Instagram and Facebook at any time — in MedDesk (Settings → Messengers) or in its Instagram and Facebook settings. We then stop receiving messages and delete the access token. How to delete the rest is described on the Data deletion page.

6. How long data is kept

Conversations are kept on the clinic's computer until the clinic deletes them. We keep the copy of the clinic's database for the periods set out in our contract with the clinic. Messages on their way to the clinic stay with us for no longer than 14 days.

7. How we protect data

Our server exchanges data with the program in the clinic and with Meta only over encrypted connections (HTTPS). Clinic staff see in the program only what their role allows, and their actions are written to a log.

8. Your rights

A patient can find out what data the clinic keeps about them, and have it corrected or deleted — to do so, contact the clinic. You can also write to us at support@meddesk.kg: we will reply within 30 days and pass your request on to the clinic. Data is processed under the personal data laws of the Kyrgyz Republic.

9. Changes

A new version of this policy will appear on this page with a new date.