أنت تعرض الإصدار 1، وقد حلّ محله إصدار أحدث. عرض الإصدار الحالي
هذه الصفحة غير متاحة بالعربية بعد، لذا تُعرض بالإنجليزية.

Privacy Policy

Version 1 · Effective 12 October 2026

Privacy Policy — Alhakeem Health

Last Updated: October 12, 2026
Effective Date: October 12, 2026

Welcome to Alhakeem Health ("Alhakeem", "we", "our", or "us"). Alhakeem Health is a comprehensive medical practice and electronic health management platform designed to connect patients, physicians, and clinics across the Arab Republic of Egypt.

We are fully committed to protecting your personal privacy and safeguarding your sensitive medical data in strict compliance with Egyptian Law No. 151 of 2020 on the Protection of Personal Data (قانون حماية البيانات الشخصية رقم 151 لسنة 2020), Egyptian healthcare regulations, and the Google Play Developer Policies.

This Privacy Policy explains how we collect, use, process, share, store, and protect your information when you access or use the Alhakeem Health mobile application, website, and associated clinical services.

1. Important Medical & AI Disclaimer

Alhakeem Health is a clinical management, tele-booking, and medical information management tool. It is NOT an emergency service, nor is it a substitute for professional clinical medical advice, in-person diagnosis, or emergency treatment.

  • No Emergency Services: If you are experiencing a life-threatening medical emergency, call the Egyptian Ambulance Service immediately (123) or visit the nearest hospital emergency room.
  • AI Health Assistant: Our integrated artificial intelligence ("Alhakeem AI Assistant" powered by Google Gemini and clinical knowledge bases) provides general health information, drug directory references, and administrative assistance. AI-generated responses are informational only and must never be considered binding clinical diagnoses. All medical treatment decisions, prescription issuance, and clinical evaluations are performed solely by licensed healthcare professionals.

2. Categories of Data We Collect

Under Egyptian Law No. 151 of 2020, data is divided into Personal Data and Sensitive Personal Data (البيانات الشخصية الحساسة). We collect only what is strictly necessary to provide healthcare and clinic administration services:

A. Personal Identification & Contact Data

  • Patients: Full name, Arabic name, mobile phone number (primary identifier verified via SMS OTP), optional email address, national identity number (optional, for clinical verification), date of birth, gender, residential governorate (within Egypt), home address, and emergency contact details.
  • Doctors & Healthcare Staff: Full name, title, professional medical specialty, syndicate registration number, professional email, phone number, clinic name, clinic physical address, and working hours.

B. Sensitive Health & Medical Data (البيانات الشخصية الحساسة)

With your explicit prior consent, we process:

  • Electronic Medical Records (EMR): Chief complaints, consultation visit notes, past medical history, diagnoses (including ICD-10 structured diagnoses), surgical/operative reports, and doctor clinical assessments.
  • Vital Signs & Biometric Health Metrics: Blood pressure, heart rate, body temperature, blood sugar (RBS), body weight, and oxygen saturation (SpO2).
  • Medications & Prescriptions: Digital prescriptions issued by your physician, prescribed dosages, medication tags, allergy records, chronic illnesses, and Drug-Drug Interaction (DDI) safety checks.
  • Diagnostic Reports & Imaging: Laboratory test results, investigation orders, Echocardiogram (Echo) cardiac measurements, and diagnostic attachments.
  • Patient Uploads: Photos or scans of printed prescriptions, medicine boxes (for OCR matching against our clinical drug catalog), and diagnostic PDFs.

C. Technical, Device & Usage Data

  • Device Identifiers: Push notification tokens (Firebase Cloud Messaging - FCM, and Apple Push Notification service - APNs), device platform (Android/iOS), operating system version, and unique installation identifiers.
  • Access & Security Logs: IP addresses, session timestamps, audit logs, authentication records, and HTTP request headers.
  • Media Processing Metadata: When you upload images, EXIF metadata (such as device model and embedded GPS location coordinates) is automatically stripped on our servers before the image is saved or processed.

3. Legal Bases and Purposes of Processing

In accordance with Article 3, Article 5, and Article 12 of Egyptian Law No. 151 of 2020, we process your personal and sensitive data under the following lawful bases:

  1. Explicit Prior Consent (الموافقة الصريحة المسبقة): You provide affirmative, explicit consent during registration, onboarding, and prior to uploading any sensitive medical documents or sharing records with a healthcare provider.
  2. Performance of a Healthcare Contract: Processing is necessary to schedule clinical appointments, manage clinical visits, generate electronic prescriptions, and facilitate doctor-patient consultations.
  3. Legal Compliance & Medical Ethics: Compliance with Egyptian public health reporting laws, medical record-keeping standards, and electronic transaction laws.
  4. Vital Interests & Safety: Protecting your vital health interests, such as drug allergy alerts and contraindicated medication warnings.

Specific Purposes of Use:

  • To create, verify, and maintain your secure patient or clinician account.
  • To enable clinic staff and physicians to document clinical encounters and track patient progress.
  • To provide optical character recognition (OCR) on medicine packages and vital sign slips.
  • To deliver push notifications regarding upcoming appointments, clinic updates, and prescription issuances.
  • To maintain an audit log of who accessed your medical files via the in-app Privacy Center.

4. Device Permissions We Request

Our Android mobile application requests specific device permissions. Each permission is requested strictly in-context and only with your explicit approval:

  • Camera (android.permission.CAMERA): Required only when you choose to photograph a medicine box for automated drug name identification, scan a printed prescription, or take a picture of a laboratory test sheet. We never access your camera in the background.
  • Media & Photos (android.permission.READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE): Required only to let you select and attach diagnostic test results, PDF lab sheets, or profile avatars from your device storage.
  • Notifications (android.permission.POST_NOTIFICATIONS): Used to send critical appointment reminders, doctor schedule updates, and prescription notices. You may opt out at any time through system settings or the app profile (push_opt_out).
  • Phone / SMS (Authentication): SMS OTP codes are transmitted to verify your mobile phone number during registration and secure password recovery. We do not read your personal SMS inbox.

5. Data Sharing and Third-Party Disclosures

We do NOT sell, rent, lease, or monetize your personal or medical data to any third party, advertiser, data broker, or marketing entity under any circumstances.

We disclose your data only in the following strictly controlled scenarios:

  1. Your Linked Physicians & Clinics: Your medical records are accessible only to healthcare professionals with whom you have an active clinical relationship (confirmed doctor link). You have full granular control over which categories (e.g., visits, prescriptions, lab results, echo reports) are shared with each doctor.
  2. Authorized Cloud Infrastructure & Sub-processors:
    • Google Cloud Platform (GCP) & Google Gemini: Used for secure enterprise AI assistance and Vertex AI medical knowledge retrieval under strict confidentiality and enterprise zero-retention data privacy standards. Your prompt inputs are not used to train public foundation models.
    • Firebase Cloud Messaging (Google LLC): Transmits encrypted push notifications to your mobile device.
    • Resend: Transmits transactional emails (account verification and password resets) for registered email accounts.
    • DigitalOcean LLC: Enterprise hosting infrastructure with encrypted volumes, firewalls, and isolated network layers.
  3. Legal Obligations: If mandated by a competent Egyptian judicial authority, court order, or official request from the Egyptian Ministry of Health / Personal Data Protection Center under Egyptian law.

6. Cross-Border Data Transfers

Where your encrypted data is processed on secure cloud infrastructure located outside the Arab Republic of Egypt, Alhakeem Health adheres to Articles 14, 15, and 16 of Egyptian Law No. 151 of 2020. We ensure that cross-border service providers provide a level of data protection equivalent to Egyptian statutory standards, bound by rigorous data processing agreements, end-to-end encryption, and standard contractual clauses.

7. Data Retention and Deletion Policy

In full compliance with the Google Play Account Deletion Policy and Article 13 of Egyptian Law No. 151 of 2020:

A. Retention Schedules

  • User Account & Identifiers: Retained while your account remains active.
  • Medical & Clinical Records: Egyptian medical regulations and malpractice statutes require medical clinics and licensed doctors to maintain patient clinical records for a statutory retention period (typically 5 to 10 years).
  • Temporary Upload Caches & Push Tokens: Inactive push tokens and temporary files are purged regularly.

B. Right to Erasure & Account Deletion Request

You have the absolute right to delete your account and personal data at any time:

  1. In-App Account Deletion (Direct Path):
    • For Patients: Log in and navigate to your Profile page (/profile). Under the "Your Data" section, click "Request Account Deletion" (طلب حذف الحساب). You can also request deletion directly within the mobile app's Profile screen. This immediately records a deletion request for administrator processing.
    • For Doctors and Clinic Staff: Log in and navigate to your Profile page (/profile). Under the "Delete Account" section, enter your current password to confirm and delete your account.
  2. External Deletion Request (For users who uninstalled the app or lost access):
    • If you have uninstalled the app, lost your device, or cannot access your account, you can submit an account and data deletion request at any time by emailing privacy@alhakeem.io with the subject "Account Deletion Request", or via our web deletion portal at https://alhakeem.io/request-deletion. Please provide your registered mobile phone number or email address so our team can verify your identity and process the deletion.

What Happens Upon Deletion:

  • Your personal login credentials, mobile phone mapping, authentication tokens, push notification keys, and personal contact profile are permanently deleted from our active databases within thirty (30) business days.
  • In compliance with Egyptian healthcare record-keeping laws and clinical malpractice statutes, existing clinical records associated with past visits conducted at licensed clinics are detached from your personal user account and retained in an anonymized/pseudonymized clinical archive solely for physician medical liability and regulatory compliance.

8. Your Legal Rights (Under Egyptian Law No. 151 of 2020)

As a Data Subject (الشخص المعني بالبيانات), you possess enforceable legal rights:

  • Right to Know and Access (الحق في العلم والاطلاع): The right to know what personal data we hold and obtain a structured digital copy. You can download your complete medical record instantly using the in-app export feature (Settings → Export Health Data).
  • Right to Rectification (الحق في التصحيح والتعديل): The right to correct inaccurate personal details via your profile.
  • Right to Granular Control (التحكم الدقيق في المشاركة): Using the Privacy Center, you can view the complete access log of every clinic that has reviewed your records and revoke sharing privileges for any doctor at any time.
  • Right to Object and Withdraw Consent (الحق في الاعتراض وسحب الموافقة): You may withdraw your consent for future data processing at any time without affecting past lawful care.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Egyptian Personal Data Protection Center (مركز حماية البيانات الشخصية) if you believe your statutory rights have been infringed.

9. Technical and Organizational Security Measures

We implement state-of-the-art security measures to safeguard your sensitive information:

  • Encryption: All data in transit is protected using TLS 1.3 / HTTPS encryption. Databases and private storage disks are encrypted at rest with AES-256 standards.
  • Tenant Isolation & RBAC: Multi-tenant architecture ensures complete isolation between separate clinics. Role-Based Access Control (RBAC) ensures nurses, receptionists, and doctors can access only authorized fields.
  • Security Headers & Attack Mitigation: Enterprise rate limiting, brute-force defense buckets, CORS whitelisting, parameterized queries, and constant-time password verification (bcrypt).
  • Data Breach Notification: In the improbable event of a data security breach that risks your rights, we will notify the Egyptian Personal Data Protection Center within 72 hours and inform affected users in accordance with Egyptian legal directives.

10. Children’s Privacy

Alhakeem Health does not knowingly allow minors under the age of 18 to create independent accounts without parental or legal guardian supervision. Pediatric health profiles (طب الأطفال) may only be managed by a verified parent or legal guardian.

11. Amendments to This Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications in our services, technological updates, or Egyptian statutory amendments. We will notify you of material changes via an in-app notice, SMS/email alert, or updated timestamp on our website.

12. Contact Information & Data Protection Officer (DPO)

If you have any questions, inquiries, or requests regarding this Privacy Policy or your data rights, please contact our designated Data Protection Officer:

  • Entity: Alhakeem Health Platform
  • Data Protection Officer (DPO): dpo@alhakeem.io
  • General Privacy Inquiries: privacy@alhakeem.io
  • Headquarters: Cairo, Arab Republic of Egypt
  • Official Website: https://alhakeem.io
  • Account & Data Deletion Portal: https://alhakeem.io/request-deletion
الإصدارات السابقة