Privacy Policy

Last updated: November 2, 2026

Draft notice: This document is a general-purpose template. It has not been reviewed by a lawyer and is not legal advice. Health-data privacy law is jurisdiction-specific and this draft must be reviewed by qualified legal counsel — particularly for compliance with health-data regulations where the Platform operates — before production use.

1. What Data We Collect

Depending on how you use the Platform, we may collect:

  • Account data: name, email, phone number, password (stored hashed, never in plain text).
  • Health-related data: appointment details, messages exchanged with your doctor or clinic, and any documents or images you choose to upload as part of your care (e.g. lab results, photos).
  • Usage data: pages visited, actions taken, and device/browser information, for security and reliability purposes.
  • Doctor/clinic professional data: for provider accounts — license number, specialty, verification documents.

2. How We Use Your Data

  • To operate core features: booking appointments, messaging, and displaying your appointment history.
  • To verify doctor and clinic accounts before they become active on the Platform.
  • To maintain security (e.g. detecting suspicious login activity) and to keep an audit trail of sensitive actions.
  • To communicate with you about your account or appointments (e.g. confirmation, reminder, or password-reset emails).

3. Who We Share Data With

Your health-related data is shared only with the specific doctor(s) or clinic you have an appointment or conversation with — never broadcast to other users of the Platform. We do not sell your personal or health data to third parties. Limited technical data may be processed by infrastructure providers (e.g. our hosting/database provider) strictly to operate the Platform, under contractual confidentiality obligations.

4. Your Rights

  • Access: you can request a copy of the personal data we hold about you.
  • Correction: you can update inaccurate account information at any time from your dashboard settings.
  • Deletion: you can request deletion of your account and associated personal data, subject to any legal or medical-record retention requirements that may apply in your jurisdiction.
  • To exercise any of these rights, contact us using the details below.

5. Data Security

We use industry-standard measures (encrypted connections, access-controlled databases, and role-based permissions) to protect your data. No system is 100% secure, and we encourage you to use a strong, unique password for your account.

6. Data Retention

We retain account and appointment data for as long as your account is active, and afterward only as long as necessary for legal, medical-record, or security purposes.

7. Children's Data

The Platform is intended for use by adults managing their own care, or by a parent/guardian managing care on behalf of a minor. Do not create an account claiming to be someone else without authorization to do so.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact Us

For any questions about this Privacy Policy or to exercise your data rights, please contact us using the contact details published on the Platform.