Welcome to DocMate (also known as CuraCare) ("the app," "we," or "us"). This document transparently outlines the privacy framework and data protection commitments across our iOS and Android mobile applications.

• Identity & Contact Credentials: Full name, verified email address (@gmail.com or verified OAuth), and phone number used solely for booking confirmation and SMS/OTP verification.
• Queue Coordination Demographics: Age and gender used strictly for administrative queue ordering in clinic waiting lists. (The app never asks for or stores medical details).
• Administrative Booking Details: Scheduled date, time slot, clinic name, specialty, and visit status (confirmed, completed, cancelled).

• Professional Credentials & Licensing: Full legal name, medical specialty, qualifications/degrees, years of clinical experience, and professional biography.
• Administrative Verification Documents: Valid Medical Syndicate Card photo and National ID card photo (collected solely for identity verification and administrative vetting; never made publicly accessible).
• Clinic & Practice Information: Clinic name, governorate, city, street address, clinic contact numbers, working schedule slots, and consultation fees.
• Subscription Verification Records: Uploaded bank transfer or mobile wallet transaction receipts for the 300 EGP/month subscription (following the 30-day free trial); we store receipt proof only and never store credit card numbers.

• Push Notification Tokens: Encrypted Firebase Cloud Messaging (FCM) tokens utilized strictly to deliver real-time appointment updates and queue alerts.
• Technical Diagnostics: Device model, OS version (iOS/Android), and anonymous crash telemetry to ensure software reliability.

The application requests device privileges solely when actively triggered by the user for essential functionality:

• Camera & Photo Library (NSPhotoLibraryUsageDescription & NSCameraUsageDescription): Requested exclusively when updating profile avatars, uploading Medical Syndicate licensing cards, or submitting payment receipts. The app never accesses device media in the background.
• Push Notifications: Dispatched to notify patients and doctors about confirmations, queue changes, and administrative approvals. Can be disabled anytime via operating system settings.

Personal data is processed exclusively for explicit healthcare and operational objectives:

• Coordinating medical appointment schedules and clinic queue management.
• Validating physician syndicate credentials to ensure patient safety and professional integrity.
• Dispatching critical transactional updates and multi-factor authentication codes.
• Securing user sessions, mitigating fraud, and maintaining infrastructure reliability.

We partner solely with industry-certified enterprise cloud providers adhering to SOC2, HIPAA, and ISO 27001 standards:

• Supabase Inc. (Database & Auth Infrastructure): Hosts encrypted PostgreSQL databases with granular Row-Level Security (RLS) policies.
• Google LLC (Google Sign-In & Firebase Messaging): Delivers secure OAuth authentication and encrypted push notification services.
• Apple Inc. (Sign in with Apple): Provides privacy-centric single sign-on authentication for iOS users.

Users have the right to delete their account and data at any time directly through the application settings or by contacting support. In full compliance with Apple App Store Guideline 5.1.1(v), Google Play Store Data Safety Policies, and international privacy laws, every user (both Patient and Doctor) has the unrestricted right to permanently delete their account and associated personal data directly within the mobile application.

Exact Database & System Actions Executed Upon Deletion:

• Authentication Directory Removal: The record is permanently deleted from auth.users, instantly terminating all active tokens and sessions.
• Complete Record Purge: Profile records (profiles), doctor clinic listings, consultation queues, appointment history, uploaded syndicate IDs, and receipt files are eradicated via server-side cascading functions.
• FCM Token Unregistration: All push tokens are unlinked immediately.
• Irreversibility: The purge is instant, complete, and permanent. Data cannot be restored once executed.

📅 Data Retention Schedule & Policy

• Active Accounts: User profiles and appointment history are maintained exclusively while the user account remains open and active to facilitate clinic operations.
• Post-Deletion: All identifying records, clinical entries, and uploaded credentials are immediately and irrevocably expunged from live production databases.
• Automated Disaster Recovery Backups: Encrypted backup snapshots undergo a rolling purge cycle and are completely eradicated within a maximum of 30 days.
• Technical Telemetry & Diagnostics: Anonymized crash metrics devoid of personal identifiers are retained for no longer than 90 days strictly for operational reliability before automated deletion.

🍏 Sign in with Apple Token Revocation & Identity Management

Pursuant to Apple App Store Guideline 5.1.1(v), initiating account deletion for accounts authenticated via Sign in with Apple immediately invalidates all active session tokens and user identifiers. Users can independently review or revoke app authorization anytime on iOS devices via: Settings > Apple ID > Sign-In & Security > Sign in with Apple > DocMate > Stop Using Apple ID.

We enforce modern technical and architectural safeguards to protect medical information:

• In-Transit Encryption: All client-to-cloud traffic is encrypted with modern TLS 1.2 / TLS 1.3 protocols.
• At-Rest Encryption: Database records and verification attachments are safeguarded with AES-256 volume encryption.
• Granular Authorization (RLS): Database-level Row-Level Security policies strictly segregate tenant records.

Under international privacy governance and local regulatory frameworks, you maintain complete rights:

• Right to Access: View and verify your recorded profile details directly in-app.
• Right to Rectification: Update contact details, clinic working hours, or specialty information.
• Right to Erasure: Users have the right to delete their account and data at any time directly through the application settings or by contacting support without any restrictions.
• Children's Privacy: Our platform is intended for users 18 years of age or older. Consultations for minors must be initiated and overseen by parents or legal guardians.

For inquiries, privacy assessments, or compliance documentation, contact our Data Governance & Support Team: