Last updated: 1 September 2026
What we collect
- Account details: name, email, phone, date of birth, preferred language.
- Health information you or your providers add: appointments, notes, prescriptions, uploaded files, insurance details.
- Technical data: device, IP address, and usage events needed to run and secure the service.
How we use it
To provide bookings, telemedicine and records; to send appointment reminders; to detect fraud and abuse; and, only with your consent, to send offers.
Who can see your health data
- You, through your account.
- Providers you book with, limited to the relevant visit and any files you explicitly share.
- Our staff, only for support you request, and every such access is logged with a reason.
We do not sell health data. Aggregated, de-identified statistics may be used to improve the service.
Storage and security
Data is stored in encrypted form. National identifiers and payment details are never stored in plain text. Payment card numbers are handled by our payment provider and never touch our servers.
Your rights
You can export your data, correct it, or ask for account deletion from Account → Security. Clinical records may be retained where the law requires it.
Contact
privacy@shifa.health