Who we are and the scope of this policy
Medical Plus (طب بلس) is an Iraqi platform that connects patients with doctors and laboratories: provider search, appointment booking, and laboratory bookings. This policy applies to the Medical Plus mobile app and its public support pages.
Data we collect
- Account and contact data: full name, email, an optional phone number, governorate, physical address, and an optional public profile photo.
- Optional precise location: used to sort nearby providers and to let providers pin their service location.
- Health and service data: appointments, laboratory bookings, medical records, clinical notes, and patient-entered notes.
- Identifiers: the account user ID and the device notification token used to deliver service notifications.
Medical Plus does not collect card or bank details, does not include a third-party advertising SDK, and does not sell your personal data.
How we use data
- Creating and securing your account, and showing providers only the details needed for the services you request.
- Fulfilling bookings, maintaining the medical file, and notifying you about service status.
- Sorting providers by distance when you choose to share your location.
- Protecting the platform from abuse and fraud.
We never use health data for advertising and never track you across apps or websites.
Service providers and storage
- Google Firebase: authentication, database, App Check, and notifications.
- Cloudflare: trusted gateways for public-media operations and notification delivery.
- Cloudinary: hosting public profile images only; medical records are never stored there.
- Providers (doctor or laboratory) see only the information needed for an authorized booking or medical record.
Retention and deletion
- You can permanently delete your account in-app: Account, then Delete account, or request deletion online on the account deletion page.
- Deletion removes the authentication account, profile, public profile image, device notification tokens, favorites, and notification history.
- Completed transaction and clinical records may be retained only where applicable law or medical recordkeeping duties require it, with access restricted to authorized parties.
Security and choices
Data is encrypted in transit over HTTPS and stored with trusted providers. Location and notifications are optional OS permissions. You can deny them and continue using the core service.
Contact
For any privacy question or request: neoflames00@gmail.com