End User Licence Agreement

SideClick End User Licence Agreement (EULA)

This End User Licence Agreement ("EULA") governs the installed SideClick software for Windows and macOS, the native SideClick companion app for iPhone, and the clinician web app. The online services around it — purchasing, trials, your account and seats on our sync server, the sealed copy of your records it keeps, and patient portal publication — are governed by the Terms of Service, which incorporates this EULA.

1. Parties and acceptance

This EULA is between SideClick (Pty) Ltd, a South African company ("SideClick", "we"), and the practice or practitioner installing the Software ("you"). Registration number 2026/655265/07. Registered office: 175 Neptune Way, Olympus, Pretoria, 0081.

You accept this EULA by installing or using the Software, and, where the installer or the registration screen presents it, by clicking to accept. The first-run Privacy & Data Protection Notice is a separate, versioned disclosure that the Software asks you to acknowledge before use and again whenever it is revised.

2. Definitions

• "Software" — the SideClick desktop application (Windows and macOS), the native SideClick companion app for iPhone, the clinician web app, and the Documentation, in the edition you are licensed for. The companion app is signed into with the same account as the computer and holds a copy of the records its person may open, encrypted on the phone.
• "Edition" — one of the two capability sets in §4: Solo and Practice.
• "Account" — one account per person on our sync server: an email address, a password that never leaves the person's devices, and a recovery code only they hold (§8). Not per practice, not per device.
• "Subscription" — the seats a purchase pays for, held as a pool on the payer's Account: edition, seat count, kind (§5) and end date. Every purchase is a subscription that renews by the period chosen at checkout; there is no one-time purchase.
• "Seat" — one person's right to use the sync server under a Subscription, in every edition: every paid edition includes the sealed copy of §7.4 and the sync between the person's Devices. A Seat is handed to a person by invitation, follows them into every practice they share with the payer, and returns to the payer when they share none. A person holds one Seat at a time, whatever their role. A Seat is either a clinician Seat, which is paid for, or a free Seat for a front desk or bookkeeper, which costs nothing and comes with each clinician Seat (§3).
• "Device" — a computer, phone, tablet or browser the person has signed in on. Each Seat permits five Devices, of which at most three computers; a reinstall on the same computer is the same Device.
• "Practice", "Clinic" and the roles — a practice is the clinical business under one practice number, owned by one or more practice owners and worked in by associates and assistants; a clinic is the business that holds one or more practices, owned by a clinic owner and staffed by the front desk and the bookkeeper. One person may hold several roles; the rules attach to the role (§3).
• "Evaluation Window" — the 30-day full-featured period from first registration of a computer that holds no Seat (§6).
• "Practice Data" — all clinical and business records you create or import in the Software, including protected health information. Practice Data is yours, not ours (§7).

3. Licence grant — seats, roles and devices

Subject to payment and this EULA, SideClick grants you a non-exclusive, non-transferable licence to install and use the Software for your practice's own clinical and administrative operations:

• Seats. Up to the number of clinician Seats in your Subscription, and the same number of free Seats for a front desk or bookkeeper. There is no key, file or activation step: the Seats go onto the payer's Account at purchase and are handed to people by invitation from within the Software. Each Device learns its person's Seat from the sync server at sign-in and keeps working on what it last knew. Every person who signs in holds a Seat, whatever their role — a practice owner, an associate, an assistant, the front desk, a bookkeeper or a clinic owner alike. Every clinician Seat comes with one free Seat, which costs nothing and which only a person whose every role is front desk or bookkeeper may hold. Practice owners, clinic owners, associates and assistants hold a clinician Seat, and the payer always holds a clinician Seat of their own. What each edition's base price includes, and the price of each further clinician Seat, is stated on the storefront's pricing page.
• Roles. A practice owner holds the practice number and sees every record made under it — automatically, without a request or a consent; every opening of a note they did not write is logged. An associate is a clinician under the practice's number who sees their own patients, and other patients only through a cover by a colleague, a copy sent to them, a handover from another practice, or a change of treating clinician, each recorded in the Software. An assistant works under a named supervising clinician, sees only the patients that clinician assigns, writes entries that wait for the clinician's co-signature, and keeps no copy. The front desk and the bookkeeper see the identity and money layers of the practices they serve (the bookkeeper by file number only), never a clinical note, and keep no copy. A clinic owner sees the business side of every practice in the clinic and never a clinical record. Consent in the Software is only ever the patient's.
• Copies. A patient file belongs to the practice it was opened in. Every clinical entry has two owners — the practice, through its owners, and the clinician who wrote it — and both hold a copy from the day it is written. "Members keep their own copy" is a practice setting, on by default, which the practice owner may switch off; a clinician sees it when they accept an invitation. What a leaver keeps, and what the practice keeps, is set out in the Terms of Service §7.
• Devices. Five Devices per Seat, at most three of them computers. Over the limit, the sync server refuses only signing in on a new Device; it never removes a Device on its own. Only the person can Remove a Device of theirs (it signs out and deletes its local copy the next time it connects) or Mark it as lost (it is blocked at once, every other Device is signed out, the person sets a new password, the keys the Device held are rotated, and it erases the app's data if it ever connects again) — from any Device they are signed in on or from the web app. Nobody else can wipe or remove a person's Device.
• Solo single-seat term. The Solo edition is licensed for one practitioner: one clinician Seat, with that Seat's Devices, and the free Seat for a front desk or bookkeeper that comes with it. Use by more than one practitioner is a breach of this EULA, and the remedy is contractual — the Software never remotely disables an installed copy (§7.3).

4. Editions

Editions are capability sets, not headcounts — Seats multiply within an edition. The edition identifiers in brackets are the values your Seat carries.

Edition	Adds
SideClick Solo (solo)	The full clinical feature set: notes, scheduling, billing (including printable superbills and receipts), outcome measures, on-device AI, local encrypted backup, full audit and compliance tooling — and the zero-knowledge sync server: every entry sealed on the device and kept on the server as the sealed copy of §7.4, multi-device sync between the Seat's Devices with conflict resolution, the clinician web app and the native iPhone companion, field capture from the phone (photos and voice memos as clinical attachments). 1 clinician Seat — one practitioner, with that Seat's five Devices — plus a free Seat for a front desk or bookkeeper.
SideClick Practice (portal)	Everything in Solo, for several people: a Seat for every member of the practice or clinic — a clinician Seat for each owner, associate and assistant, and a free Seat for a front desk or bookkeeper, one for each clinician Seat — the roles of §3, invitations (with an end date for the membership where one is wanted), cover by a colleague in the practice, a change of treating clinician, a copy sent to a clinician of another profession on the patient's consent, handover to another practice, co-signature, the assistant role, the "members keep their own copy" setting, and the remote patient portal: invites, self-booking, secure messages, outcome-measure forms, document delivery, published calendar feeds. Priced per clinician Seat: the first clinician Seat is included and every further owner, associate or assistant is an additional clinician Seat; front desk and bookkeeper Seats cost nothing, one for each clinician Seat.

The mobile companion

The following are binding product commitments for the iPhone companion app, in the same sense as §7:

1. A companion, not a second desk. The phone signs in with the person's own Account and is approved from another of their Devices (or their recovery code or authenticator). It reads records and captures notes, sessions, photos, voice memos and messages; signing and co-signing (and so amendments), consent management, administration, billing, audit, export, settings and Seats are never available from the phone.
2. Mandatory device gate. The companion requires the phone's biometric or passcode gate (Face ID, Touch ID or passcode) on every cold start. Biometric verification happens entirely inside the device's operating system: it is never a key-custody mechanism, and no biometric information ever reaches SideClick.
3. Removal is the person's, and immediate. Remove and Mark as lost (§3) work on a phone exactly as on a computer, from any of the person's Devices. A removed phone deletes its copy the next time it connects; a phone marked lost is blocked at once and erases the app's data if it ever connects again. Nothing a phone had already sent is lost: every capture reaches the sync server sealed as soon as the phone is online.
4. Background upload is sealed. When enabled, captured photos, voice memos, and pending changes upload in the background while the phone is locked or pocketed — always as sealed, encrypted content we cannot read (see the Privacy Policy §5).

5. Seat kinds

• Subscription. Valid until its end date. The Software warns you 14 days before it ends. When it ends, the 90 read-only days of §7.4 begin: nothing new is accepted on the sync server, and your sealed copy there stays readable and exportable; a renewal within them resumes service in place. Every paid Seat is a Subscription; there is no one-time purchase and no Seat without an end date.
• Trial. Every feature, on every Device, for 30 days from the day the Account is created — started by the sync server at sign-up, one per Account. A trial ends on day 30, after which it is treated as holding no Seat for the creation actions of §6; its sealed copy follows the same 90 read-only days as any ended Subscription.

6. Evaluation Window and a computer without a Seat

A computer whose person holds no Seat runs the full Solo feature set, with a persistent non-blocking notice, for the 30-day Evaluation Window from its first registration. After the Evaluation Window lapses, exactly five actions are gated until a Seat is held: creating new patient records, new session notes, new appointments, new invoices, and new practitioner accounts. Everything else — including reading, editing, exporting and restoring all existing Practice Data — continues to work, indefinitely (§7.1).

An ended Subscription never gates these creation actions; its end affects the sync server's services only (§7.4 and the Terms of Service).

An ended Trial is treated as holding no Seat: the sync server's services pause as in §7.4, and once the Evaluation Window has also lapsed the same five creation actions are gated until a Seat is held. Everything else — including reading, editing, exporting and restoring all existing Practice Data — continues to work, indefinitely (§7.1).

7. Data-access guarantees (binding product commitments)

The following are contractual commitments, not marketing. The Software is engineered so that each of them holds in every Seat state — valid, in the 90 read-only days, expired, suspended, absent, or evaluation-lapsed — and they survive termination of this EULA:

1. Your existing data is never hostage. Reading, editing, exporting (encrypted backup archive, PDF, CSV) and restoring existing Practice Data work in every Seat state, forever, including after a refund, a suspension, or the end of the Evaluation Window.
2. AI features are never edition-gated. On-device AI assistance ships identically in every edition.
3. Your Devices keep the Seat they last saw. Each Device learns its Seat from the sync server at sign-in and keeps working on what it last knew; normal operation never requires contacting us. An outage of our servers — or SideClick ceasing to exist — can never lock you out of an installed copy.
4. The end of a Seat pauses first and deletes only after 90 days, and never touches your Devices. When the Subscription a person's Seat comes from ends, or their Seat returns to its payer and they hold none, their sealed copy on the sync server stays for 90 days, read-only: they sign in, read and export, and their Devices keep receiving what is already there, but nothing new is accepted — no new entries, media or keys. We send a warning on day 1, day 60 and day 83. After the 90 days the person's sealed copies on the server are deleted — the one deletion our server performs on its own. A record leaves the server when its keeper deletes it — the practice for the practice's record, a person for a copy they hold — or under this 90-day rule; a practice's record is never touched by one person's 90 days. Nothing on the person's Devices is ever touched: every record already on them stays readable and exportable under §7.1. A Seat held again within the 90 days resumes service in place.
5. Downgrades never deactivate. After a Seat or edition downgrade, existing over-cap practitioner accounts and Devices stay fully active; only new Seats and sign-ins on new Devices are blocked.
6. No vendor-side recovery (the no-vendor-recovery rule). The guarantees above are about what we can never take away; this one is about what we can never give back. Practice Data is sealed with keys that exist only on your Devices, in your password and your recovery code, and in the sealed copies wrapped for the people who may open each record. We never receive any of them and cannot read, reset, or reconstruct them; no support request can bypass this, and that impossibility is deliberate (it is why we cannot read your records either). If you forget your password and lose your recovery code, and no Device of yours is still signed in, the sealed data they protect is permanently unrecoverable by anyone, including us. You are responsible for keeping your recovery code safe; the Software shows it once at sign-up and makes you type it back, and §7.1's export guarantees exist so you can always hold your own backups.
7. Nothing is destroyed by retention on its own. Every copy of a record has one keeper, and retention is one number of years per keeper: the practice keeps the practice's record, under the number a practice owner types; you keep the copies that are yours — the copy you took when you left a practice, and a copy sent to you — under the number you type on your Account. Each is counted from the patient's last entry, with no default and no rule by country. The Software lists the records past a keeper's period; nothing is deleted until that keeper chooses Delete, and every choice is recorded in the audit trail. A practice's Delete leaves a copy a person holds untouched, and a person's Delete leaves the practice's record untouched. Only three things delete without a keeper's choice, and all three are stated here: an erase of a single Device's copy that the person set in motion or chose — Remove, Mark as lost, ten failed unlock attempts, the offline limit the person set, or Start over on a computer whose records are not connected to an Account — which touches that Device alone while the sync server and their other Devices keep the records; when a person leaves a practice or is removed from it, when their membership ends on the date it was given, or when a cover given to them ends, the deletion on their own Devices of the keys to the records they may no longer hold (what a leaver keeps is set out in the Terms of Service §7; the practice's copy and the sync server's are untouched); and the deletion of a person's sealed server copy after the 90 read-only days of §7.4.

8. Your Account and your Seat

Your Account and its 30-day trial are created on the sync server when you sign up, with the email address you register, which is verified by a message to it. Signing up sends the sync server that email address; the name of the practice you set up, if you set one up; a value derived from your password that lets the server check it, never the password itself; your public keys, and your private keys sealed under your password and under your recovery code, which SideClick cannot open; and, for your list of Devices, this Device's keys, the name of its operating system, its name as the operating system gives it (sealed), and a non-reversible hash of its machine identifier and install path. None of this contains clinical data, patient information or usage telemetry.

There is no key to type and no activation request. Your Seat is held on the sync server with your Account: each Device learns it at sign-in and keeps working on what it last knew. A new Device signs in with your email and password and is approved from another of your Devices, or with your recovery code or authenticator code. Your password and recovery code are yours alone: do not share them or hand your sign-in to anyone (see the Acceptable Use Policy).

9. Updates

On store platforms (Microsoft Store, Mac App Store, App Store), the Software is updated through the platform store's own update mechanism, under the store's terms — stores may collect their own installation and update telemetry, which we neither receive nor control. Where a direct (non-store) channel is offered, updates are delivered through a signed update channel whose update checks fetch a static release listing and send no information about you or your Practice Data beyond the web request itself (see the Privacy Policy §5). Every installation may take every release, whatever its Seat's state; there is no updates-until date on any Seat. Declining an update never disables the Software.

10. Intellectual property and restrictions

The Software is licensed, not sold. SideClick and its licensors retain all rights not expressly granted. You must not: (a) sublicense, rent, or provide the Software as a service bureau to third parties; (b) remove proprietary notices; (c) circumvent Seat, Device, or edition enforcement; or (d) reverse-engineer, decompile, or disassemble the Software except to the extent applicable law permits it despite this restriction (for example for interoperability) — and nothing in this EULA limits the export and data-access rights in §7.

Third-party open-source components are included under their own licence terms; their attribution notices are published in the Third-Party Notices.

11. Clinical responsibility and AI assistance

The Software is a practice-management and documentation tool with optional AI-assisted drafting that runs entirely on your device. It is decision support only:

• The Software does not diagnose, treat, or make autonomous clinical decisions, and must not be relied on to do so.
• Every AI-assisted draft requires your review and signature before it becomes part of the record; the treating practitioner retains full professional and legal responsibility for all clinical content and decisions.
• AI assistance additionally requires your explicit opt-in and per-patient consent recorded for the purpose "AI note generation".
• Voice dictation and voice-memo transcription run on-device (on macOS via Apple's on-device speech framework); recordings and clinical text never leave your devices in readable form.
• Video consultations are not provided by the Software. You may store a video-consultation link from a service you choose against an appointment; the Software opens that link in your browser, and the consultation itself runs on that service under its own terms.

You are responsible for your own regulatory compliance as a healthcare provider — including professional registration, record-keeping, retention, consent, and data-protection obligations under the laws and professional rules that apply to you.

12. Warranty disclaimer

Except as expressly stated in this EULA or required by law, the Software is provided "as is", and SideClick disclaims all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement. Nothing in this EULA excludes or limits warranties, guarantees or remedies that cannot lawfully be excluded under the consumer law that applies to you.

13. Limitation of liability

To the maximum extent permitted by law: (a) neither party is liable for indirect, consequential, or punitive damages, or loss of profits or goodwill; and (b) SideClick's aggregate liability under this EULA is capped at the fees you paid in the 12 months preceding the event giving rise to liability. This cap does not apply to death or personal injury caused by negligence, to gross negligence or wilful misconduct, or to any liability that cannot lawfully be limited.

14. Term and termination

This EULA runs until terminated. SideClick may terminate for material breach unremedied 30 days after written notice. On termination: the licence grant in §3 ends and you must stop using the sync server and the portal; the data-access guarantees in §7 survive, so you can always extract your Practice Data. Sections 7, 10–13, and 15–16 survive termination.

15. Governing law

This EULA is governed by the law of the Republic of South Africa, and the parties submit to the jurisdiction of the South African courts — without depriving you of mandatory consumer or data-protection rights of your own country of residence.

16. General

Order of precedence: an executed Business Associate Agreement or Data Processing Agreement prevails over this EULA for all personal-data and protected-health-information obligations; marketplace or app-store standard terms never replace or waive those instruments. If any provision is unenforceable, the rest remains in force. This EULA plus the documents it incorporates is the entire agreement concerning the installed Software. You may transfer your licence with the practice as a going concern with notice to us; otherwise assignment requires consent, not to be unreasonably withheld.

---

SideClick (Pty) Ltd · support@sideclick.io Version 1.9 · Published 2026-10-26