إشعار الخصوصية

This notice explains what data is processed when you use the platform, why, who can access it, and what choices you have. It is written in plain language; the technical detail of each processing activity is in the Data Processing Notice.

1. Types of processing

We separate seven activities, because each has a different purpose and different choices:

1. Creating and operating your account — necessary for your account to exist at all.
2. Providing the medical service you requested — necessary to do what you asked for.
3. Processing health and clinical information — a sensitive category, on separate explicit consent.
4. Product analytics and service improvement — entirely optional.
5. Marketing communications — optional, and not currently active.
6. Cookies, analytics and advertising technologies — optional and off by default.
7. Security, fraud prevention and legal obligations.

2. Data actually processed

• Identity and account data: name, e-mail, account identifier, role.
• Contact information: phone number and country code.
• Your self-declared country, city (optional) and preferred interface language.
• Booking and appointment data: time, consultation type, status, cancellation reasons.
• Medical profile: chronic conditions, medication, allergies, date of birth.
• Consultation records and doctor summaries.
• Uploaded files: clinical images, lab reports, radiology, prescriptions, other documents.
• Consent records: category, version, the exact text shown, its language, the time, and the screen it came from.
• Audit records for sensitive operations.
• In-app notifications.
• Privacy requests you submit.
• Cookie preferences.
• Limited technical data: page path, event name and a hashed session identifier — only when optional analytics are enabled.

3. What is NOT collected

We do not store your IP address. An address is used momentarily as a SHA-256 hash to limit repeated sign-in attempts and abuse; the raw address is never stored and never logged. We also do not collect precise location, browser fingerprints, advertising identifiers or device identifiers. IP addresses and browser language are never used to determine your country — your country comes only from what you select in your profile.

4. Health and clinical information

Your health and clinical information is treated as a sensitive category. It is used solely to provide the service you requested, for your safety, to meet legal or professional duties where those apply, and for other clearly stated compatible purposes.

Categorically, health data is:

• never used for targeted advertising;
• never sold;
• never disclosed to advertisers;
• never used to build advertising profiles;
• never included in marketing audience segments;
• never used in product-promotion campaigns.

5. Product analytics and service improvement (optional)

This is off by default. Refusing it does not block registration and does not affect your access to the service, and it can be withdrawn later from your privacy page.

When enabled, aggregated or pseudonymised usage and operational data is used to measure adoption, performance, completion rates and feature use, and to support general reporting on how the project is performing. It never includes consultation text, medical files, diagnosis, treatment, clinical notes or identifiable health data, and it is never used for any health-based targeting of individuals.

6. Marketing communications

Marketing is optional and entirely separate from the Terms, this notice and analytics; it is never bundled into registration. At present no marketing channel is active: in-app notifications are the only implemented channel, and there is no e-mail, WhatsApp or SMS delivery. No marketing option is therefore offered to you today. If a channel is added later, consent will be asked for separately, its time and version recorded, and withdrawal made easy.

7. Cookies, analytics and advertising

Cookies necessary for sessions, sign-in and security are used. Analytics and advertising technologies are off by default and load only after your consent and only if the operator has enabled them. No real advertising account is currently configured.

Advertising is never shown on booking, consultation, account, doctor or admin pages. Cookie requirements differ between countries, and we make no claim of automatic compliance with every legal regime.

8. Security, fraud prevention and legal obligations

Limited data is processed to protect accounts, prevent abuse, record sensitive operations and respond to lawful requests where applicable.

9. Who can access your data

• You — your own data and your consent records.
• The treating doctor — what is needed to provide your consultation.
• Administrators — under specific permissions and least-privilege rules.
• Infrastructure providers — to the extent needed to run the service (see the Data Processing Notice).

Staff have no blanket access to clinical data, and access restrictions are enforced in the database, not only in the interface.

10. Legal bases

Legal bases differ depending on which country's law applies to you. Where applicable, processing relies on: necessity for the agreement with you (operating the account, delivering the service); explicit consent (health data, optional analytics, and marketing in future); legal obligations (retention and responding to official requests); and legitimate interests (security and fraud prevention) to the extent your law permits.

This is not a single worldwide legal conclusion, and mandatory law in your country may give you additional rights.

11. Retention

Medical, audit and consent records are kept for as long as needed to provide the service and to meet legal and professional duties. Final numeric retention periods have not yet been decided for each category, and we will not state figures here that nobody has actually approved. The decision table is tracked as an owner action required before launch.

12. Your rights and choices

• Review your consent history and current state.
• Withdraw analytics consent yourself, immediately, from your privacy page.
• Withdraw health-data consent by submitting a privacy request from the same page — choose "withdraw health-data consent". There is deliberately no instant self-service button for this one, because withdrawing it stops medical services that are already running and requires a manual review of records that law or professional duties may require us to keep. Your request is recorded, reviewed, and answered.
• Request a copy of your data, or request deletion of your account, from the same page.
• Correct your profile information.

Withdrawing consent to health-data processing may prevent continued delivery of services that genuinely depend on that data. Withdrawal does not make earlier lawful processing unlawful, and it does not override retention that law or professional duties require. Deletion requests are reviewed manually; no automatic deletion occurs.

13. Consent records

For each consent we record: the category, whether it was granted or withdrawn, the text version, a snapshot of the exact text shown, its language, the screen it came from, and the server-clock time. No record can be edited once created — a withdrawal is added as a new record and the previous one is never altered. Records are deleted only when an account is erased in response to your request or a legal requirement, which is a deliberate manual operation.

14. Children

Accounts are for people legally able to hold one where they live, or acting under the supervision of a parent or guardian.

15. Changes to this notice

Each version carries a version identifier and an effective date. The current version is privacy_v1, effective 2026-08-02.

16. Contact

For privacy questions, use the contact page, which lists the channels the operator has actually enabled.