Privacy Policy

1. Information We Collect and the Legal Basis

We collect information directly from you, automatically through your use of the Service, and occasionally from third parties (e.g., lab facilities or other doctors, only with your explicit consent).

2. How We Protect Your Sensitive Data (PHI)

The security of your Protected Health Information (PHI) is our highest priority. We take the following measures:

• Encryption: All communication between your device and our servers is secured using industry-standard SSL/TLS encryption. PHI stored in our database is protected using at-rest encryption.
• Access Control: Access to your PHI is strictly limited to authorized doctors, clinical staff, and necessary technical personnel, all of whom are bound by strict confidentiality agreements.
• Compliance Frameworks: Our security practices are designed to align with international standards and best practices for healthcare data protection to ensure robust protection standards.
• Anonymization/Pseudonymization: For research, service improvement, or analytics, we remove or encrypt identifiers so the data cannot reasonably be linked back to you.

3. Data Sharing and Disclosure

We only share your information in the following limited circumstances:

• Internal Sharing: With our licensed medical professionals and administrative support team solely for the purpose of providing, managing, and billing for your care.
• Third-Party Providers (Data Processors): We use third-party tools for secure data hosting, payment processing (e.g., Bank Transfer), and communications. These providers are carefully vetted and operate under data processing agreements that mandate the same level of data protection and confidentiality.
• Referral Partners: If you explicitly consent, we may share relevant PHI with hospitals, laboratories, or specialist physicians for referral, testing, or follow-up care.
• Legal & Regulatory Compliance: We will disclose data when required by the laws of Pakistan or an order from a competent regulatory or judicial authority, particularly concerning mandatory disease reporting or under a court-issued warrant.
• Aggregated Data: We may share aggregated, non-personally identifiable data with partners or the public for healthcare trends and reporting.

4. Your Rights and Choices

As a user in Pakistan, you have specific rights regarding your personal information, subject to any medical record keeping regulations:

• Right to Access and Obtain Copies: You have the right to request access to the personal data we hold about you, including your medical records.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal or health information on your record.
• Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Account Deletion: You can request the deletion of your account. Note that we are legally required to retain your medical records (PHI) for a mandatory period as stipulated by Pakistani health regulations, even if your account is closed.

To exercise any of these rights, please submit a formal request to our contact email in Section 6.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information.

• Essential Cookies: Necessary for the operation of the Service, such as authentication and security.
• Analytical Cookies: Used to understand how the Service is used and to improve user experience (e.g., using Google Analytics).

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.