Data we collect

We only collect the data needed to provide our medical services:

• Account data: name, email address, mobile number, ID number, date of birth, gender, city and locality.
• Profile photo: only if you choose to upload one from your camera or photo gallery.
• Health data: your appointments with doctors, laboratory tests, prescribed medicines and surgical operations linked to your medical file at the clinic.
• Technical data: device type, operating system, app language and the push notification token (FCM token).
• Communication data: messages you send through the contact form and the ratings you submit on our content.

How we use your data

We use your data for the following purposes only:

• Creating your account, signing you in and protecting your account.
• Booking, managing and reminding you of your appointments.
• Showing your medical file (tests, medicines, operations) to your treating doctor.
• Sending notifications about your appointments, test results and clinic services.
• Answering your enquiries and improving our services and medical content.

Basis of processing

We process your data based on the consent you give when registering, on what is necessary to deliver the medical service you requested, and on our obligation to comply with applicable health and legal requirements.

Sharing your data

We never sell or rent your data. Sharing is limited to the following cases:

• Doctors and the medical and administrative staff of the clinic, only to the extent needed to serve you.
• Technical service providers that operate the app on our behalf, such as Google Firebase Cloud Messaging for push notifications and our hosting provider.
• Official authorities when required by law or a court order.

App permissions

The app may request the following permissions. You can decline them or turn them off later from your device settings:

• Notifications: to send appointment reminders and updates to your medical file.
• Camera and photo gallery: to pick a profile picture or upload a requested document.
• Internet access: to sync your data with our servers.

Data security

We apply technical and organisational measures to protect your data, including HTTPS encryption in transit, hashed passwords and role-based access control. No method of electronic transmission or storage is 100% secure, and we commit to notifying you of any breach affecting your data.

Data retention

We keep your data for as long as your account is active. Medical records are retained for the period required by applicable health regulations, after which they are deleted or anonymised.

Account and data deletion

You can delete your account at any time:

• From inside the app: Profile → Settings → Delete account.
• Or by sending a request from your registered email address to drfirasrifai@gmail.com with the subject "Account deletion request".
• On deletion, your personal data (name, email, mobile, ID number, photo, notification token) is removed within 30 days at most. A minimum of medical and financial records may be retained where the law requires it.

Your rights

At any time you have the right to:

• Access the data we hold about you and obtain a copy of it.
• Correct or update any inaccurate data from your profile page.
• Withdraw your consent or turn notifications off.
• Request deletion of your account and data as described above.
• Submit a complaint to us using the contact details at the end of this page.

Children's privacy

The app is not directed to children under 13, and we do not create accounts for them without a guardian's consent. If we discover such an account, we will delete it together with its data.

Cookies

Our website uses cookies that are necessary to keep your session, remember your preferred language and improve your browsing experience. You can control them from your browser settings, though disabling them may affect some functionality.

Third-party links and services

The app or website may contain links to external websites whose content and privacy practices we do not control. We recommend reviewing the privacy policy of every site you visit.

Changes to this policy

We may update this policy from time to time. The last updated date is shown at the top of this page. Continuing to use the service after an update means you accept the revised version.