This text describes how the system actually behaves, but it has not been reviewed by a lawyer. It must be reviewed and aligned with Egyptian law and Ministry of Health regulations before the first paying clinic is signed.
1 Who controls the data
The clinic is the controller of its patients’ data. iyadatna acts as a processor on its behalf: we store and process data only as far as running the service requires, and only on the clinic’s instruction. We do not sell patient data and we do not use it for marketing.
2 What we collect
Patient data entered by the clinic (name, phone, date of birth, national ID, allergies, chronic conditions, encounters, prescriptions, invoices and attachments), clinic staff accounts (name, email, role), and operational security logs recording who changed what and when.
3 Isolation between clinics
Every row is tied to a clinic identifier, and every query is constrained to the active clinic at the data layer — not in the interface. A clinic can never see another clinic’s data, and automated tests fail the build if that separation breaks.
4 Encryption and sensitive fields
National ID, confidential notes and payment details are stored encrypted. National ID lookups use a keyed fingerprint (exact match only) without decrypting the value. Phone numbers are stored unencrypted because reception must search on partial numbers — a stated operational trade-off.
5 Attachments and imaging
Uploaded files are stored on private storage that is not reachable from the internet. Access goes through a short-lived signed link issued only after the user’s permission is checked. No patient file has a direct URL.
6 Retention and deletion
Medical records are archived, never hard-deleted, in line with medical record retention requirements. When a subscription ends the clinic keeps a window in which it can export its data before access closes. Permanent deletion happens on written request from the clinic, within what the law allows.
7 Patient notifications
Appointment reminders are sent over WhatsApp to the number held by the clinic and contain only the patient name, clinic name and appointment time — never any clinical detail.
8 Service providers
We rely on a small number of third parties for hosting, messaging and payment processing. Each receives only the minimum data needed to perform its function.
9 Patient rights
Patients may access, correct and obtain a copy of their data. Those requests go to the treating clinic directly, because the clinic is the controller — we support it technically in fulfilling them.
Get in touch
For any question about your data or these terms: Contact us