Privacy Policy

This Privacy Policy explains how Medical Network (developed and operated by Medical Network Technology, contact: privacy@medicalnetwork.com) collects, processes, and protects information when users access our healthcare platform through the MedNet mobile application (Android/iOS), websites, and related services.

We collect the following categories of data:

Account & Identity Data

• Full name, email address, phone number.
• National ID (used for identity verification and health record linkage).
• Date of birth, gender, blood type, and governorate.

Health & Medical Data

• Global health record identifier.
• Appointment booking history (doctor, clinic, date, status).
• Prescription data accessed via prescription lookup codes.
• Health record access logs and permissions granted to providers.

Location Data

• Precise location(GPS) — collected only when you use the "Find Nearby" feature to locate clinics and pharmacies. Location is requested at the time of use and is not collected in the background.
• Approximate location (governorate/city) — derived from your profile to show relevant organizations when precise location is not available.

Device & Usage Data

• Device type, operating system version, app version.
• Push notification tokens (for appointment reminders).
• Session analytics and crash reports (anonymized).

Your data may be accessed by the following parties, subject to strict access controls:

• Clinics & Doctors — Only those you have explicitly granted health record access to, or who are involved in your booked appointments.
• Pharmacies — Only when you present a prescription code for dispensing.
• Laboratories — Only when referred by an authorized doctor through the platform.
• Infrastructure Providers — Cloud hosting (Google Cloud Platform), push notification services, and analytics providers operating under data processing agreements.

We never sell patient-identifiable data to third parties.

• Encryption — All data in transit uses TLS 1.2+. Sensitive data at rest is encrypted using AES-256.
• Access Control — Role-based access controls (RBAC) ensure users can only access data they are authorized to see.
• Token Security — Authentication tokens are stored in device secure storage (Keychain/Keystore) and are never logged.
• Audit Logging — All access to health records is logged and visible to the patient.
• Monitoring — Continuous security monitoring and incident response procedures are in place.

Data is retained only for as long as required to provide services, satisfy legal obligations, resolve disputes, and enforce agreements.

• Account data is retained while the account is active.
• Upon account deletion, personal data is removed within 30 days, except where retention is legally required.
• Anonymized analytics data may be retained indefinitely for service improvement.

You can request deletion of your account and all associated personal data at any time. See our Data Deletion page for detailed instructions and options.

Depending on your jurisdiction, you may have rights to access, correction, deletion, restriction, portability, and objection related to your personal data. To exercise any of these rights, contact us at the address below.

MedNet is not a medical device. The app does not diagnose, treat, cure, or prevent any disease. It is a platform that facilitates communication between patients and licensed healthcare providers. Always consult a qualified healthcare professional for medical advice.

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email. Continued use of MedNet after changes constitutes acceptance of the updated policy.

For data protection requests or privacy inquiries, contact our privacy team:

• 📧 Email: privacy@medicalnetwork.com
• 🌐 Website: medicalnetwork-g.com