Privacy Policy

PatientBook (“PatientBook”, “we”, “us”) provides a connected care platform for doctors, assistants, patients, laboratories, scan centers, pharmacies and clinic owners. This policy explains what personal information we collect through the PatientBook mobile app (iOS and Android), the PatientBook web app and patientbook.app, how we use it, who we share it with, and the choices you have.

By creating an account or using PatientBook you confirm that you have read this policy.

Our role depends on the data. For your account details (phone number, name, profile and app settings) we decide how the data is used, and we are responsible for it.

For clinical records that a doctor, clinic, laboratory or pharmacy creates or uploads about a patient, that provider decides what is recorded and why. PatientBook stores and processes those records on the provider’s behalf, and on the patient’s behalf for records the patient adds. If you have a question about the content of a medical record, your care provider is the right first contact.

Information you give us

• Account details: name, mobile phone number, account type (doctor, assistant, patient, laboratory, scan center, pharmacy, clinic administrator), and profile details such as specialty, clinic or facility name, and profile photo.
• Health information: visits and consultations, diagnoses, prescriptions, lab results, scan and imaging reports, and documents or images you or your care team upload.
• Family and relationship information: family members you add to your account, and the links between patients, doctors and clinics that let records be shared with the right people.
• Appointments and bookings you make or that a clinic makes for you.
• Subscription and plan details for doctor and clinic accounts, and anything you send us when you contact support or request a demo.

Information collected automatically

• Device and usage data from the mobile app, such as device type, operating system, app version, and how features are used. We collect this through Google Firebase Analytics.
• A push notification token for your device, so we can send reminders and alerts through Firebase Cloud Messaging.
• Sign-in session data. On the web app, a session token is stored in your browser so you stay signed in. This is strictly necessary for the service to work.

Device permissions (mobile app)

The app asks for access to your camera, photo library and files only when you choose to photograph or attach a document, image or lab report. It asks for notification permission to send reminders. You can change these permissions at any time in your device settings; the features that depend on them will stop working.

Our website

The marketing pages of patientbook.app do not use advertising trackers or third-party analytics cookies.

• To create and secure your account and verify your phone number with a one-time code.
• To provide the service: store and display medical records, share them with the people you or your provider authorize, manage appointments and visits, and generate visit summaries and reports.
• To extract structured results from lab reports you or your lab upload (see section 5).
• To send service messages: verification codes, appointment reminders, and notices such as a cancelled or rescheduled visit, by push notification or WhatsApp.
• To operate, troubleshoot, secure and improve PatientBook, and to prevent fraud and misuse.
• To respond to your requests and comply with legal obligations.

When a lab report (a PDF or image) is uploaded, we send the file to OpenAI’s API so that test names, values and units can be read out and saved as structured results. We use this only to provide the extraction feature, and we do not use your reports to train our own models.

We use OpenAI under its API terms, which state that data sent through the API is not used to train OpenAI’s models by default. Extraction is a convenience; please check extracted values against the original report before relying on them for clinical decisions.

We do not sell your personal information and we do not share it for advertising.

We share information only in these situations:

• People you authorize. Your doctors, clinic staff, laboratories and pharmacies can see records that are shared with them through the relationships on your account. Family members you link may see information you choose to share.
• Service providers that help us run PatientBook and are allowed to use the data only for that purpose:
  • Akedly, for phone-number verification and one-time codes.
  • WATI (WhatsApp Business), for WhatsApp notifications such as visit cancellations and reschedules.
  • Google Firebase, for app analytics and push notifications.
  • OpenAI, for lab report extraction (section 5).
  • Our cloud hosting and database infrastructure, which stores your account and records.
• Legal and safety. When required by law, court order or a competent authority, or to protect the rights, safety and security of our users and of PatientBook.
• Business changes. If PatientBook is involved in a merger, acquisition or sale of assets, your information may transfer to the successor, which must honor this policy.

Some of our service providers, including OpenAI and Google, operate outside Egypt. When we use them, your information may be processed in other countries. We share only what is needed for the specific service and require providers to protect it.

We use measures designed to protect your information, including encrypted connections (HTTPS/TLS), authenticated access, and role-based limits on who can see a record. No system is completely secure, so we cannot guarantee absolute security. Please keep your phone and verification codes private, and tell us right away if you think your account has been accessed without permission.

We keep your account information for as long as your account is active. Medical records are kept for as long as needed to provide care continuity and to meet medical record-keeping and other legal obligations. When you ask us to delete your account, we delete or anonymize your personal information unless we or your care provider are legally required to keep it, in which case it is kept only for that purpose.

You can ask us to give you access to your personal information, correct it, delete it, restrict or object to certain uses, or withdraw consent you have given. These rights are recognized under Egypt’s Personal Data Protection Law (Law No. 151 of 2020) and, where they apply to you, other data protection laws.

How to delete your account and data

Email info@patientbook.app from the address you used to contact us, with the subject “Account deletion request” and the mobile number registered to your PatientBook account. We may ask you to confirm your identity before we act on the request, and we will confirm once it is done. Records created by your doctor or clinic may need to stay with that provider, as explained in section 9.

You can also turn off push notifications and device permissions in your device settings at any time. If you believe we have mishandled your data you may also complain to Egypt’s Personal Data Protection Center.

PatientBook is not directed at children to use on their own. A parent or legal guardian can add a child, or another family member they care for, to their account and manage that person’s records. By adding a family member, you confirm you have the authority to do so. If you believe a child has created an account without a guardian, contact us and we will remove it.

We may update this policy as PatientBook changes. When we make a material change we will update the effective date above and, where appropriate, notify you in the app or by message. Continued use of PatientBook after a change means you accept the updated policy.

Questions, requests or complaints about privacy: info@patientbook.app