Privacy Policy

1. Information We Collect

We collect information that you provide to us, information collected automatically when you use the App, and information from third parties as described below.

1.1 Information You Provide

• Account Details: name, email, phone number, password (hashed), profile photo (optional).
• Health-related Preferences (Optional): specialty you are searching for, preferred providers, symptoms or notes you voluntarily add when booking.
  Note: These entries are user-submitted and used solely to help you find services. Sahati does not create or maintain clinical medical records.
• Appointment Information: selected provider or center, date/time, visit reason (if provided), status, feedback or ratings.
• Order & Delivery Details: delivery address, contact name/phone, items ordered (e.g., medical devices or non-prescription products), payment method tokens or transaction IDs (processed by payment providers).
• Support Communications: messages, call recordings (if support calls are recorded), and attachments you send to us.

1.2 Information Collected Automatically

• Usage & Device Data: app interactions, crash logs, performance data, device model, OS version, language, and unique device identifiers.
• Location Data (if enabled): approximate or precise location to show nearby doctors, labs, cosmetic centers, and pharmacies, or to facilitate delivery.
• Cookies & Similar Technologies: If you visit our website or web views, we may use cookies for essential functions, analytics, and fraud prevention.

1.3 Information From Third Parties

• Service Providers: payments, analytics, messaging, maps/geolocation, cloud hosting.
• Healthcare & Merchant Partners: confirmation of appointment or order status, fulfillment updates.

2. How We Use Information

• Provide, operate, and improve Sahati, including search, booking, and ordering features.
• Recommend relevant providers, centers, labs, and pharmacies based on your preferences and location.
• Process and deliver orders for medical devices and eligible non-prescription items.
• Facilitate communications among users, providers, delivery partners, and support.
• Send transactional notifications (appointment confirmations, reminders, delivery updates).
• Maintain safety, integrity, and fraud prevention; enforce our terms and policies.
• Perform analytics and develop new features.
• Comply with applicable laws and respond to lawful requests.

Legal bases (EEA/UK users): We process information to perform our contract with you, with your consent (e.g., location, marketing), to comply with legal obligations, and for our legitimate interests (e.g., security, service improvement) where not overridden by your rights.

3. How We Share Information

• Healthcare & Merchant Partners: limited details needed to confirm and deliver your appointments or orders.
• Service Providers: vetted vendors that process data on our behalf (e.g., hosting, analytics, payments, communications, delivery).
• Legal & Safety: if required by law or to protect rights, safety, and integrity of users and the service.
• Business Transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection of your data.

We do not sell your personal information. We also do not share your data with third parties for their own direct marketing without your explicit consent.

4. App Permissions

• Location: to show nearby services and enable delivery. You can disable this in your device settings.
• Camera & Photos/Media: to upload images (e.g., device photos, receipts, or notes relevant to bookings/orders).
• Notifications: to send appointment reminders, order updates, and important alerts.

5. Data Retention

We retain personal information only as long as necessary to provide the App and fulfill the purposes described above, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and legal requirements.

6. Security

We implement administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent (e.g., location or marketing).
• Port your data to another service, where technically feasible.

To exercise rights, contact us at info@sahatiapp.com. We may need to verify your identity.

EEA/UK: You may lodge a complaint with your local data protection authority. California: You have rights under the CCPA/CPRA, including access, deletion, and opt-out of certain data sharing.

8. Children’s Privacy

The App is not directed to children under the age of 13 (or the age required by local law), and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can take appropriate action.

9. International Transfers

Your information may be transferred to and processed in countries other than your own, where data protection laws may differ. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect your information.

10. Third-Party Services

We may provide links to or integrate with third-party services (e.g., maps, payment processors, analytics). Your use of those services is governed by their respective privacy policies.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version in the App and update the “Last updated” date. Material changes may be communicated via in-app notice or email.

12. How to Contact Us

If you have questions or requests about this Privacy Policy or your personal information, contact us at: info@sahatiapp.com.