Privacy Policy
1. Who We Are
Eyadaty ("عيادتي") is an online platform that lets patients search for medical clinics in Iraq and request consultation appointments, and lets clinic owners register their clinics and manage their bookings.
2. Information We Collect
a. Account Information
- Email address, for users who choose to secure their account via a one-time verification code.
- We do not require a permanent password; sign-in happens through a verification code sent by email.
b. Booking Information
- The full name and phone number provided when submitting a booking request.
- The date and time of the booking, and the requested clinic.
c. Clinic Owner Information
- Clinic name (in Arabic, and optionally in Kurdish and English), medical specialty, governorate, an optional text address, and consultation fee.
- Geographic location, captured once at registration and not tracked continuously.
- Clinic photos uploaded by the owner, automatically processed to strip hidden metadata such as embedded location data before publishing.
d. Payment Information
We do not store bank card numbers or any sensitive payment data on our servers. All payments and subscriptions are processed through a certified external payment provider; we only retain the subscription status and renewal date.
e. Basic Technical Information
Secure session data needed to run the account, including a temporary identifier for a "guest" user before securing their account.
f. Patient Location at Check-In
We collect the patient's geographic location once, only upon arrival at the clinic (check-in), to verify their actual proximity to the clinic's location. This is not tracked continuously, and is separate from the clinic's own location captured once by its owner at registration.
g. Reviews
When you review a clinic, we store the rating and comment text, linked to the account that wrote them.
3. How We Use Your Information
We use the information above strictly for the following purposes:
- Providing the clinic search and appointment booking service.
- Enabling clinic owners to manage their clinics and bookings.
- Verifying accounts and preventing misuse or fraud.
- Communicating with you about your bookings or subscription status.
- Improving service quality and fixing technical issues.
We do not use your data for advertising purposes, and we do not sell or rent it to any third party.
4. Sharing Information with Third Parties
We share your data only with necessary service providers:
- Supabase: hosting our database and backend servers, securely and encrypted.
- Payment processor: to process subscription payments; it never sees or stores your card details.
We do not share your data with any advertising, marketing, or other party, unless legally required to do so.
5. Data Security
- Isolating each user's data so no other user can access it without explicit permission.
- Encrypting the connection between your app and our servers.
- Automatically stripping sensitive metadata from photos before publishing.
- Never storing any sensitive payment data on our servers.
6. Your Rights
You have the right to:
- Access your data and request a copy of it.
- Request full deletion of your account and data at any time.
- Correct any inaccurate information about you.
These rights can be exercised directly within the app (Account section), or by contacting us at the email address below.
7. Children's Privacy
Our services are intended for adults capable of making medical decisions. We do not knowingly collect data from children under 18 independently of a parent or guardian.
8. Data Retention
We retain your data for as long as your account is active. Upon an account deletion request, your personal data is deleted within a reasonable period, except where the law requires longer retention.
9. Changes to This Policy
We may update this policy from time to time. The version number and last-updated date appear at the top of this page, and we will notify you of any material change.
10. Contact Us
For any inquiry regarding your privacy or data: 📧 contact@eyadaty.clinic