Privacy Policy

1. Information We Collect

• Account and profile data, such as name, email, role, phone number, clinic details, and professional profile information.
• Patient and appointment data, such as patient name, phone number, gender, age, booking details, appointment date/time, and status.
• Communication data, such as in-app chat messages, announcements, and related metadata (timestamps, sender role, read status).
• Uploaded files, such as profile images, clinic barcode images, documents, and chat attachments.
• Notification data, such as push notification tokens used to send notification alerts.
• Authentication/session data, such as hashed passwords (for applicable accounts), phone-based identifiers, and login/session tokens.

2. Device Permissions We Use

• Camera: to capture images for chat, when you choose.
• Photos/Media Library: to select and upload files or images from your device.
• Notifications: to send appointment updates, announcements, and chat alerts (when enabled by you).
• Storage/Files access (where applicable): to export and save generated files such as appointment reports.

3. How We Use Information

• To create and manage user accounts and provide secure access to the app.
• To schedule, manage, and track appointments and clinic workflows.
• To enable real-time communication between doctors and patients.
• To send chat notifications and announcements.
• To store and retrieve uploaded files required for app functionality.
• To maintain service reliability, security, and fraud/abuse prevention.

4. Legal Basis and Necessity of Processing

We process personal data on applicable legal bases, including service delivery needs, legitimate interests, legal obligations, and consent where required by law.

We use personal data only when necessary for core app functions such as login, appointment management, communication, notifications, and support.

5. How Information Is Shared

We do not sell personal information. We may share information only in the following cases:

• Service providers and infrastructure partners that process data on our behalf (for example, cloud storage and push notification delivery).
• Within your authorized organization/workflow, such as doctor, patient, clinic staff, and admin access controls.
• When required by law, regulation, legal process, or to protect rights/safety.
• In connection with a merger, acquisition, restructuring, or business transfer, with appropriate safeguards.

6. Data Retention

We retain information for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on data type and operational/legal requirements.

7. Data Security and Confidentiality

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, or alteration.

Sensitive data is handled as confidential information and protected with encryption and access controls where applicable.

We use cloud infrastructure with security controls to protect data in transit and at rest, as configured.

While we implement reasonable and industry-standard security measures to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your information, and there may be unforeseen vulnerabilities that could result in unauthorized access, disclosure, or data breaches. We shall not be held liable for any loss or damage arising from such incidents beyond our reasonable control.

8. Your Choices and Rights

You may have rights to access, correct, delete, or object to certain processing of your personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised Last Updated date.

10. Contact Us

If you have any privacy questions or requests, contact us at dapptosupport@gmail.com.