Privacy Policy

1. Introduction

Welcome to Hayah Care. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, including authentication using third-party providers like Google and Facebook.

2. Information We Collect

When you use our portal, we may collect the following types of information:

• Personal Profile Details: Your name (first name, last name), email address, and profile picture (when logging in via Google or Facebook OAuth).
• Booking Information: Your phone number, selected clinic/doctor, appointment date/time, and any patient notes you voluntarily provide when booking a consultation.
• Device Data: Basic technical logs, IP address, and browser configurations collected for security and system stability.

3. How We Use Your Information

We process your data for the following essential business purposes:

• To authenticate your identity and secure your medical patient account.
• To manage and schedule your medical appointments with Hayah Care clinics.
• To send you transactional confirmation alerts (via SMS, email, or n8n automated notifications).
• To maintain application safety, verify bookings, and prevent fraud.

4. Data Deletion and Retention

We store your personal data only as long as necessary to provide booking services. Under Meta and general data privacy guidelines, you have the right to request deletion of your account and associated social profile data.

5. Third-Party Integration and SDKs

We use Supabase Auth to orchestrate secure user authentication. When signing in with Facebook or Google, their respective privacy policies and OAuth scopes control what information they share with us. We do not sell your personal data to third parties.

6. Security Measures

We implement strict industry-standard SSL encryption and PostgreSQL row-level security (RLS) policies to protect patient records and booking information from unauthorized access.