Privacy Policy

Last updated: September 1, 2026

This Privacy Policy describes how we collect, use, and protect your personal information when you use the Nafsytic application. By using the app, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

• Full name
• Email address
• Sign-in credentials managed by Firebase Authentication; we do not store your password in the app database
• Profile photo (optional)

1.2 Health Information

• Age
• Gender
• Blood group
• Weight
• Emergency contact (name, relation, phone number)

1.3 Appointment Data

• Selected doctor
• Appointment date and time
• Appointment status
• Payment method (ZainCash / Qi Card)
• Payment proof screenshot

1.4 Session Data

• Session date and duration
• Session notes (written by the doctor)
• Reviews and ratings you submit
• Approved reviews appear under the generic name “Verified patient” after moderation and can be reported

1.5 Usage Data

• Camera and microphone — for video consultations only
• Firebase and Agora may process limited technical data needed to operate, secure, and troubleshoot their services

2. How We Use Your Information

• Create and manage your account
• Facilitate appointment booking with doctors
• Enable video consultations between patient and doctor
• Process and verify payments
• Display doctor profiles and reviews
• Provide technical support and respond to inquiries
• Improve the app and fix bugs

3. Information Sharing

We do not sell your personal information to any third party. We share your data only in the following cases:

• With the clinician you book: your account name, appointment details, payment proof, and session notes associated with that appointment.
• Service providers: Firebase (Google) for data storage and hosting, and Agora for video calls.
• Legal compliance: if required by law or to protect our rights.

4. Data Storage & Security

• All data is stored on Firebase (Google Cloud) servers with encryption in transit and at rest.
• Agora transports audio and video over encrypted connections. We do not claim that calls are end-to-end encrypted.
• The app does not provide a call-recording feature.
• We use Firestore security rules to control data access.
• Profile photos and payment proofs are stored in Firebase Storage with restricted access permissions.

5. Your Rights

You have the right to:

• Access your personal data
• Correct or update your information
• Delete your account and all associated data
• Withdraw consent for data processing

To exercise any of these rights, contact us at privacy@nafsytic.app.

6. Account & Data Deletion

You can delete your account directly in the app from Profile → Delete Account. If you cannot access the app, contact privacy@nafsytic.app. When deletion is confirmed, we will:

• Delete your account from the authentication system (Firebase Auth)
• Remove all your personal data from Firestore
• Delete profile photos and payment proofs from Firebase Storage
• Remove appointment history linked to your account

We may retain anonymized or aggregated data for statistical or legal purposes.

7. Cookies Policy

The Nafsytic app does not use cookies. We store an authentication token locally on your device to persist your login state.

8. Children's Privacy

The Nafsytic app is not intended for children under the age of 18. We do not knowingly collect data from children.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via the app or by email.

10. Contact Us

For any questions or concerns about this Privacy Policy:

📧 privacy@nafsytic.app

🌐 naf-siyah.web.app