Privacy Policy
Effective Date: October 2026 | Last Updated: October 2026
This Privacy Policy explains how PatientCare App ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you access or use the PatientCare web portal, WhatsApp-integrated clinic management services, and associated mobile applications (collectively, the "Application" or "Platform").
IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS OR USE THE APPLICATION.
1. Information We Collect
We may collect information about you across several operational surfaces:
A. Personal & Clinical Identity Data
- Identity Data: Full name, medical registration/PMDC numbers (for healthcare providers), patient IDs, and role designations.
- Contact Data: Verified WhatsApp phone number, email address, and clinic physical address.
- Consultation & Token Data: Appointment timestamps, queue status, digital token numbers, diagnosis notes, prescription archives, and fee/billing splits.
B. Derivative & Device Data
- Mobile & Browser Details: Device identifiers, OS versions, browser type, IP address, and network state.
- Usage Metrics: Token generation speeds, access times, system latency, error reports, and crash metrics.
C. Meta & WhatsApp Business API Data
For bookings and notifications routed via the Official Meta WhatsApp Cloud API, we process phone numbers, customer interaction payloads, and delivery/read receipts strictly in accordance with Meta Platform terms. We do not sell or monetize WhatsApp communication logs.
D. Device Permissions (Mobile Apps)
| Permission | Purpose & Clinical Context |
|---|---|
| Camera & Files | To capture and upload lab diagnostic reports, paper prescription scans, and clinic counter QR stands. |
| Notifications | To dispatch OPD queue calls, cancellation alerts, and live token movements. |
| Storage Cache | To preserve offline OPD queue states during intermittent internet connectivity. |
2. How We Use Your Information
- Deploy and operate real-time clinic queuing, scheduling, and digital token issuance.
- Reconcile doctor vs. clinic revenue splits and produce daily exportable payout statements.
- Transmit automated WhatsApp booking confirmations, status updates, and reminders.
- Enforce role-based isolation between clinic owners, doctors, and front-desk receptionists.
- Ensure full compliance with local regulatory standards and app store developer rules.
3. Disclosure & Sharing of Data
We do not sell personal or medical data under any circumstances. Disclosures are restricted to:
- Service Providers: Encrypted hosting providers, SMS/WhatsApp delivery gateways, and local payment clearing engines (JazzCash, EasyPaisa, Visa / Mastercard, Bank Transfer).
- Legal & Clinical Safeguards: In response to court orders, PMDC compliance inquiries, or applicable public health disclosures under Pakistani law.
4. Third-Party Integrations & SDKs
Our stack utilizes trusted infrastructure SDKs including:
- Meta WhatsApp Cloud API (verified direct business communication channel).
- Apple / Google Mobile Core Services for secure app binary deployment and crash analysis.
- Local Payment Gateways for online consultation token settlements.
5. Data Retention, Backup & Deletion
Clinical records and audit journals are archived in encrypted cold storage with automated daily backups.
- Clinic Record Purge: Clinic owners can request tenant deletion by writing to info@patientcareapp.com.
- Patient Data Deletion: Patients can request record erasure or phone number de-registration via in-app settings or WhatsApp prompt.
6. Security Infrastructure
We implement AES-256 resting encryption, TLS 1.3 in-transit tunnels, strict row-level security (RLS) across database schemas, and multi-tenant domain isolation.
7. Contact & Privacy Office
For data audits, compliance questions, or deletion requests: