Privacy & legal notices.

Who we are

The Arkin System ("ARKIN", "we") is a UK-based, AI-native healthcare platform for verified professionals and UK practices. For data-protection purposes, ARKIN acts as a controller for account and platform data, and as a processor for data handled on behalf of a practice within that practice's own instance.

UK data residency

Your data is stored and processed in the United Kingdom (AWS eu-west-2) only. The platform is designed so that we do not transfer personal data outside the UK. Each practice runs in an isolated instance, designed with no shared databases and no co-mingling between customers.

What we collect

• Account details — name, email, and the professional registration details you self-declare at sign-up.
• Usage metadata — activity needed to run and secure the service, recorded in a tamper-evident audit ledger that is kept free of patient-identifiable data.
• Content you enter — what you write to your companion or post in the Commons. The standard lanes are designed to be free of patient-identifiable data; the Max-tier toolkit is designed to de-identify clinical text in-region before processing. Automated de-identification carries residual risk and can't be guaranteed to catch every identifier, so you remain responsible for checking.

Registration & self-attestation

ARKIN is a technology provider and cannot access the regulators' registers. Registration is therefore self-attested: by joining you declare that your registration is accurate and current, and you accept that misrepresenting it breaches your own professional code. We record that attestation and reserve the right to act on a credible report.

Clinical safety & limits

ARKIN does not provide definitive clinical advice and defers to registered practitioners. The companion informs your thinking and surfaces grounded, cited guidance — the clinical decision is always yours. No agent enacts a consequential action on its own; a person approves anything that matters.

Lawful basis & your rights

We process personal data under the UK GDPR and the Data Protection Act 2018, on the bases of contract (to provide the service), legitimate interests (to run and secure it), and consent where required. You have the right to access, rectification, erasure, restriction, portability and objection. To exercise any of these, contact us and we will respond within the statutory timeframe.

Security

Secrets are held in AWS Secrets Manager; data is encrypted in transit and at rest; instances are isolated; and every agent action is written to a cryptographic, hash-chained ledger — each record is linked to the one before, so it is designed so that any later alteration shows up.

Sub-processors

We use AWS (UK region) for hosting and our AI inference runs in-region. We do not sell personal data. A current list of sub-processors is available on request.

Cookies

We use a strictly necessary session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Retention

We keep personal data only as long as needed to provide the service and meet legal obligations, then delete or anonymise it. Audit records are designed to be free of patient-identifiable data and retained for integrity and compliance.

Terms of use (summary)

A short, plain-language summary of the terms on which you use ARKIN, while our full Terms of Use are finalised under legal review. By using ARKIN you agree that:

• It informs; you decide. ARKIN supports your professional practice and administration. It does not make clinical decisions, does not provide definitive clinical, legal or financial advice, and does not replace your professional judgement or your regulator, union or indemnity provider. You remain responsible for every decision you make.
• Verified, professional use only. Access is limited to verified UK registered professionals and healthcare students. You confirm your registration is accurate and current, and you use the platform in line with your professional code.
• Acceptable use. Don't misuse the platform, attempt to access others' data, or enter patient-identifiable data into the standard lanes, which are designed to be free of it.
• Availability. ARKIN is in active development and offered on an as-is, as-available basis during the beta. Features may change, and some are gated until their governance is signed off.
• Beta / evaluation only. ARKIN is in free, invite-only beta and is still under review. It is provided for professional evaluation using simulated or de-identified cases — not for live patient care. Do not enter real patient-identifiable data during the beta, and do not rely on ARKIN for clinical decisions about real patients.
• Your content. What you create stays yours, and you can export your own data. We process it to provide the service as set out above and in this notice.

These summary terms are not yet the definitive legal agreement. The full Terms of Use will be published here once finalised.

Changes & contact

We'll update these notices as the platform matures and post the current version here. Questions, or a data-protection request? hello@thearkinsystem.co.uk.

Last updated: June 2026 · draft under review.