Privacy Policy

1. Information we collect

1.1 Patients & general users

• Account details (name, contact information, password).
• Profile and demographic information (e.g. age, gender, address, emergency contact).
• Booking and usage data (services requested, dates, locations, payments).
• Health information you choose to share to receive care (symptoms, conditions, medications, notes, attachments).
• Device and technical data (IP address, app version, device type, log data).

1.2 Health Professionals

• Identity and contact details (name, email, phone, professional address).
• Professional information (license/registration numbers, specialties, qualifications).
• Verification documents and compliance records, where required.
• Booking history, earnings, ratings, and communications via the Platform.

2. How we use your information

• To create and manage your account and profile.
• To connect Patients with suitable Health Professionals.
• To process bookings, payments, receipts, and payouts.
• To provide customer support and respond to your queries.
• To improve, personalize, and secure the Platform and our services.
• To comply with legal obligations and enforce our Terms of Use.

3. Legal bases for processing

Depending on your location, we rely on one or more of the following legal bases to process your data:

• Performance of a contract (e.g. providing the services you request).
• Compliance with legal obligations (e.g. record-keeping, regulatory requirements).
• Legitimate interests (e.g. preventing fraud, securing our systems, improving services).
• Your consent (particularly for certain health data and marketing communications).

4. Data protection & security

Medfy implements technical and organizational measures to help protect your data, including:

• Encryption in transit and at rest where appropriate.
• Access controls and role-based permissions for staff and Health Professionals.
• Audit logs and monitoring for suspicious or unauthorized activity.
• Secure development practices and regular updates to address vulnerabilities.

5. Sharing of information

We may share your information with:

• Health Professionals, to enable them to provide the services you have requested (limited to what they reasonably need for care).
• Service providers (e.g. payment processors, hosting providers, analytics tools) bound by confidentiality obligations.
• Authorities or regulators, where required by law or to protect rights, safety, and security.
• Other parties with your explicit consent.

6. International transfers

Where we transfer data outside of your country, we take steps to ensure appropriate safeguards are in place, such as contractual protections or using providers with adequate data protection standards.

7. Data retention

We keep your information only for as long as necessary for the purposes described in this Policy and as required by law (for example, health records may need to be retained for minimum statutory periods). When data is no longer needed, we securely delete or anonymize it.

8. Your rights

Depending on your location, you may have rights over your personal data, such as:

• Access: request a copy of the data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: request deletion of certain data, subject to legal requirements.
• Restriction or objection: limit or object to certain types of processing.
• Data portability: request a copy of your data in a structured, common format.

To exercise these rights, contact us at team@medfy.org. We may need to verify your identity before responding.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at team@medfy.org.