Privacy Policy

1.Data controller

The Service is published and operated by SafiDoctor ("we").

For any question about this policy or your personal data, write to us at [email protected] or on WhatsApp at +213 560 42 81 38 (messages only).

2.Data we collect

We only collect the data needed to run the Service:

• Account data: first and last name, email address, password (hashed), phone number, and the professional information you provide (specialty, practice details, prescription letterhead, photo).
• Patient data: the information practitioners enter in their records (identity, contact details, medical history, clinical notes, prescriptions, appointments, billing). See sections 3 and 4.
• Organization data: team members, roles, and permissions when you use the Service as a team.
• Technical data: connection logs, IP address, device and browser type, display preferences (language, theme).
• Audience measurement and diagnostic data: use of the Service as generic events, crash reports and performance measurements, linked only to your account's technical ID (see the section "Audience measurement and crash reports").

If you choose to sign in with Google, we receive your name and email address from Google. The Service also uses reCAPTCHA to protect authentication forms.

3.Health data and encryption

Health data is sensitive data within the meaning of Law No. 18-07. Its processing through the Service falls within preventive medicine, diagnosis, and care, under the responsibility of health professionals bound by medical secrecy, in accordance with Article 18 of that law.

Clinical notes, diagnoses, prescriptions, and documents are encrypted on the practitioner's device before being sent: our servers only receive and store their encrypted version. The encryption keys are kept separately from this data, by our authentication service, and are delivered over an encrypted connection only to the account holder and to the team members they have authorized. Every key retrieval is logged. Other information needed to run the practice — patient identity and contact details, appointments, medical history and allergies, billing — is stored in our databases, protected by access controls.

Non-medical staff of a practice (secretaries, assistants) do not have access to consultation notes or diagnoses.

4.Roles and responsibilities

For their patients' data, the practitioner is the data controller: they decide what data is entered and how it is used in their practice. SafiDoctor acts as a technical service provider and only processes this data to deliver the Service, on the practitioner's instructions.

Practitioners undertake to comply with their own obligations, in particular informing their patients, medical secrecy, and the rules of the code of medical ethics and of Law No. 18-11 of 2 July 2018 on health.

5.Purposes and legal bases

We process account and technical data to:

• create and manage your account and provide the Service's features (calendar, records, prescriptions, stock, billing);
• keep the Service secure (authentication, abuse prevention, logs);
• answer your support requests;
• comply with our legal obligations;
• measure how the Service is used and fix its errors, in order to improve it (audience measurement, crash and performance reports);
• where applicable, manage subscription billing.

These operations are based on the consent you give when creating your account, on the performance of our contract with you, and on our legal obligations. We do not use your data for marketing without your consent.

6.Audience measurement and crash reports

To understand how the Service is used and make it more reliable, we measure the use of app.safidoctor.com and of the SafiDoctor Pro mobile app with Google Analytics (Google Analytics for Firebase in the app), and we receive the mobile app's crash reports and performance measurements through Firebase Crashlytics and Firebase Performance Monitoring. Google acts as our processor; this data is exported to Google BigQuery for our own analysis only.

What is collected: the screens viewed (by name, never by address), the actions taken in the Service as closed categories (for example "appointment created", "prescription issued", "payment recorded: cash"), counts and ranges (number of lines of a prescription, size range of a file), error codes, how long some operations take, the type of device, system and browser, the language, and pseudonymous identifiers generated by these services for the app installation or the browser.

The only personal identifier sent is your account's technical ID, a random code that does not contain your name. We never send your name, email, phone number or professional information, nor any data about your patients: no identity, no identifier, no medical content, no text you typed (notes, reasons, searches), no exact amount of their payments (at most an amount range). Crash reports contain neither the error message nor what was on screen: only the type of error and where in the code it happened.

Advertising, ad personalization and Google signals are never enabled, and your device's advertising ID is never collected.

This measurement is on by default; you can turn it off at any time in Settings > General on the website, or in Settings > Privacy in the mobile app. If you visit the website from the European Union, Iceland, Liechtenstein or Norway, signed in or not, no measurement cookie is set until you accept it in the banner: without your consent, only anonymous signals with no cookie or identifier are sent.

7.Data sharing

We never sell or rent personal data. Data is only shared with:

• the technical providers strictly required to run the Service (hosting, file storage, email delivery, bot protection);
• Google (Google Analytics, Firebase Crashlytics, Firebase Performance Monitoring and BigQuery), for the audience measurement and crash reports described in the section "Audience measurement and crash reports": it receives only pseudonymous data, never patient data;
• our SMS provider, Icosnet (Algeria), which sends verification codes, sign-in codes and appointment notifications: it receives only the recipient's phone number and the text of the message;
• competent authorities where the law requires it;
• the members of your organization, according to the roles and permissions you define.

8.Transfers outside Algeria

Where processing involves transferring data abroad, it is carried out in compliance with Articles 44 et seq. of Law No. 18-07, where applicable after authorization from the national personal data protection authority (ANPDP).

Because clinical notes, diagnoses, prescriptions, and documents are encrypted on the practitioner's device before they are sent, only their encrypted version is transferred to and stored on our servers.

Audience measurement data and crash reports are processed by Google on servers located outside Algeria; this transfer is carried out in compliance with the same Articles 44 et seq. of Law No. 18-07. This data contains no patient data and is linked only to your account's technical ID.

9.Data retention

Account data is kept for as long as the account is active, then deleted or anonymized within a reasonable period after closure, subject to legal archiving obligations.

Patient records are kept for as long as the practitioner needs them; their retention is the practitioner's responsibility, in line with the rules applicable to medical archiving.

Technical logs are kept for a limited period, for security purposes.

Audience measurement data is kept for at most 14 months in Google Analytics; its copy exported to BigQuery, pseudonymous as described above, is kept for as long as needed to analyze how the Service is used. Crash reports are kept for at most 90 days by Firebase Crashlytics.

10.Security

We implement appropriate technical and organizational measures, including:

• encryption of clinical notes, diagnoses, prescriptions, and documents on the practitioner's device (libsodium authenticated encryption), with keys stored separately from the medical data;
• encryption in transit (TLS);
• role-based access control within organizations;
• protection of authentication forms (reCAPTCHA);
• regular backups.

11.Your rights

Under Law No. 18-07, you have the following rights over your data:

• right of access and information;
• right of rectification;
• right to object on legitimate grounds;
• right to withdraw consent and to erasure.

You can exercise these rights by writing to [email protected]. We will reply as promptly as possible. You also have the right to lodge a complaint with the ANPDP.

If you are the patient of a practitioner who uses the Service, please address your request to your practitioner first, as the controller of your record; we will give them all necessary assistance.

12.Cookies and local storage

The Service uses no advertising cookies. We use what is technically necessary: a session token to keep you signed in, language and theme preferences, your audience-measurement choice, and the country you are visiting from (estimated from your IP address, to know whether to show the audience-measurement banner).

Audience measurement: Google Analytics sets its cookies (_ga) on the website. If you visit from the European Union, Iceland, Liechtenstein or Norway, signed in or not, it sets them only after you accept them in the banner; without your consent, only signals with no cookie or identifier are sent. Once you are signed in, you can turn measurement off at any time in Settings > General; these cookies are deleted when you sign out.

Google's third-party services (reCAPTCHA, Google sign-in) may set their own cookies, governed by Google's privacy policy.

13.Changes to this policy

We may update this policy. The current version is published on this page with its revision date; in the event of a substantial change, we will inform you through the Service or by email.

14.Contact

For any question: [email protected] or WhatsApp +213 560 42 81 38 (messages only).