Privacy Policy

1. Scope

This policy applies to patients, care providers, administrators, and visitors to the website and app.

2. Data we collect

• Name, email, phone, governorate, city, and protected sign-in data.
• Requested services, condition description, appointment, location, and booking history.
• Provider identity, license, photo, services, prices, and availability.
• Push device token, locale, and mobile platform when alerts are enabled, plus IP address, security and error logs, and essential session cookies.

3. How data is used

• Account and booking management and matching patients with providers.
• Identity and license review, fraud prevention, and performance improvement.
• Persistent in-account notifications, limited push alerts, and delivery tracking.

4. Data sharing

We do not sell personal or health data. We share only what is necessary with the selected provider, verification administrators, Cloudflare, R2, Firebase Cloud Messaging, Resend for backup administrative email, or authorities responding to a binding legal request.

5. Location

Patient GPS location is requested only for home visits and with permission. It is never included in phone alerts and is available only in the authenticated account of the booked provider. Center bookings retain a snapshot of the center name, address, and map link instead of the patient's location.

6. Security and retention

We use HTTPS, protected sessions, and limited permissions. Data is retained while the account exists or as needed for operations, legal obligations, and fraud prevention.

7. Account deletion and rights

You may request access, correction, or deletion through the account-deletion page. Some records may be retained when legally required or needed for disputes and fraud prevention.

8. Children and international processing

Minors use the service under guardian supervision. Cloud providers may process data outside Palestine with appropriate safeguards.

9. Updates and contact

We may update this policy when services or legal requirements change. The update date is shown on this page.

10. Chats and medical reports

When you use chat, we store the message text, reports, prescriptions, and images you share, along with file names, types, sizes, and submission times, to exchange them with the approved specialist you choose.

Private chats and reports are stored in Supabase in addition to the platform services listed above. The chat database contains your display name, role, and an identifier linked to your account; passwords and sign-in sessions stay in the platform's account system. The current chat project is in Frankfurt, outside Palestine.

The platform allows only the active patient and specialist participating in a conversation to read it and its reports. The administrator dashboard does not display chat content. Attachment requests pass through an authenticated route that checks conversation access every time; the platform does not create permanent public report links. A recipient can save a copy of a shared file, and account deletion cannot remove that copy from their device.

Free consultations are cleared for both participants 24 hours after creation, on patient sign-out, or after all connected patient app instances have been absent for five minutes. Either participant can clear them manually. Content is blocked when due, while failed storage removals are retried. Previous conversations receive a 24-hour export grace period from policy activation; patient absence tracking starts when they are opened. Before clearing, you can email a complete PDF to your account email, containing message text and attachment names without medical files or their links. Emailed copies remain with their owners after clearing. Export uses Cloudflare Browser Run and Resend without storing an additional PDF archive on the platform.

Delete your account

Contact us

For questions, complaints, or privacy requests:

+970594681875