Privacy Policy
What we collect, why we need it, who can see it, and how to delete it.
What we collect
When you create an account we store your name, email address and, if you provide it, your phone number.
When you book, we store the appointment itself — the service, the doctor, the date and time, its status, and any clinical notes added by the treating doctor or nurse.
When you pay at the clinic we store the amount, the method (cash or card) and the date. We never see or store your full card number.
In the mobile app, if you allow notifications, we store a device token so we can send your appointment reminder. It identifies the device, not you personally, and it is deleted when you delete your account.
Why we use it
To provide care: to schedule your visit, prepare for it, keep your treatment record, and issue receipts.
To contact you about your own appointments — confirmations, changes, cancellations, and the reminder the day before.
We do not sell your information, and we do not use it for advertising or tracking across other apps or websites.
Who can see it
Only you and the clinic staff who need it for your care: the treating doctor or nurse, reception for scheduling and payment, and the administrator.
Access is enforced by the database itself, not only by the interface, so one patient can never read another patient's record.
We share information outside the clinic only where we are required to by law, or with your insurer when you ask us to use your coverage.
Deleting your account
You can delete your account at any time from Account, then Security, in the app or on the website. Your sign-in is destroyed immediately and you will no longer be able to log in.
Your treatment and payment records are kept for the period Saudi healthcare regulations require us to retain them. We cannot delete those on request, and we say so plainly before you confirm.
Keeping it safe
All traffic is encrypted in transit. Passwords are stored only as salted hashes and are never readable by staff. Optional two-factor authentication is available on every account.
No method of transmission or storage is completely secure. We take the measures described here, but we cannot guarantee absolute security, and you keep your account credentials confidential at your own responsibility.
Service providers
We use reputable providers to host the service, deliver notifications and protect against automated abuse. They process data only on our instructions and only as needed to run the service. We are not responsible for the independent practices of any third party you choose to share your information with yourself.
Some providers operate servers outside the Kingdom. By using the service you consent to your information being processed in those locations under equivalent safeguards.
How long we keep it
Treatment and payment records are kept for the period Saudi healthcare regulations require. Account details are kept while your account is open. We may retain information for longer where we need it to resolve a dispute, enforce our terms, or comply with a legal obligation.
Changes and governing law
We may update this policy at any time. The version published here is the one that applies, and continuing to use the service after a change means you accept it.
This policy is governed by the laws of the Kingdom of Saudi Arabia and should be read together with our Terms of Service.
Contact us
For any question about your information, or to ask for a copy or a correction, contact the clinic:
tabassamplus@gmail.com · +966 55 6686180