Medicawy is a platform specialized in information technology and medical marketing for clinics, medical facilities and healthcare providers. Medicawy aims to help patients book appointments for medical examinations, consultations, and medical services through the Medicawy platform electronically. Medicawy helps patients search for doctors by specialty, geographic location, and doctors' appointment times listed on the platform. It also helps doctors who use the platform to list information about their clinics on the platform, receive bookings from patients, and publish the medical services offered by their clinics.
Medicawy is committed to protecting the privacy of all user data, whether patients, healthcare providers, doctors, or owners of medical facilities registered on the platform. Access to user data is limited to Medicawy staff only, for the purpose of running the business, and we (Medicawy) do not resell or distribute users' data to any third parties.
User data may only be disclosed to judicial authorities, investigative authorities, or law enforcement agencies in cases permitted by law, including in execution of a judicial order or ruling, or based on an official request from the investigating Public Prosecution or judicial seizure authorities within the framework of a pending case, or based on a request from the competent national security authorities in accordance with the procedures regulating this under Personal Data Protection Law No. 151 of 2020 and its executive regulations. In all cases, Medicawy is committed to not disclosing user data to any party except to the extent required by law.
With respect to users who are doctors, healthcare providers, and owners of medical facilities, the platform displays general information about doctors and medical facilities, as well as information regarding address, appointment times, and means of contact. We do not publish any personal information specific to doctors or healthcare providers.
Medicawy does not store electronic payment data, and we do not display users' personal data or distribute this data to any other parties.
Deletion of Healthcare Provider Accounts (Doctors and/or Clinics and/or Medical Centers and/or Hospitals and/or Pharmacies and/or Medical Labs and Laboratories): Healthcare providers have the right to request deletion of their account and personal data registered with Medicawy and its applications at any time, whether directly through the application or via the dedicated link on the platform. Upon completion of the deletion request, Medicawy deletes the personal data associated with the account, such as login credentials and contact details of the account holder, and stops all booking operations linked to it.
Medicawy may retain certain general information related to the medical facility for operational, archival, and legal purposes, in furtherance of Medicawy's legitimate interest in service continuity and platform stability, and in accordance with Personal Data Protection Law No. 151 of 2020 and the applicable legal standards for determining data retention periods. In this case, Medicawy is committed to not using any retained data for any purpose other than those mentioned above.
Deletion of Patient Accounts: Users in the patient category have the right to request deletion of their account and personal data registered with Medicawy and its applications at any time, whether directly through the application or via the dedicated link on the platform. Upon completion of the deletion request, Medicawy completely deletes all personal data associated with the patient's account, including login credentials, phone number, email address, and the booking and appointment history linked to the account. Medicawy does not retain any of this data except to the extent required by applicable law, in accordance with the retention periods set out in Personal Data Protection Law No. 151 of 2020 and its executive regulations.
Data We Collect: Medicawy collects the following types of data:
Patient Data: Name, mobile phone number, email address, booking and appointment history, appointment dates, doctor ratings, and technical information such as Internet Protocol (IP) address, browser type, and device type.
Data of Doctors, Healthcare Providers, and Owners of Medical Facilities: Name, specialty, medical certificates and licenses, clinic address, working hours, means of contact, clinic-related photos, and the medical services offered.
Technical Data: Internet Protocol (IP) address, browser type, operating system, device type, approximate geographic location, cookies, and application usage data.
Mobile Application Data: Device ID, Device Fingerprint, Guest Device ID, User Agent data, and Push Notification Tokens.
Third-Party Services and Providers (Third-Party SDKs): Medicawy and its applications (the patient application and the healthcare provider application) use a limited number of third-party technical services, exclusively for the purpose of operating the push notifications feature, as follows:
Expo (Expo Push Notification Service): Used to manage and send notifications within the application, and processes the push token identifier of the user's device for this purpose only.
Google Firebase Cloud Messaging (FCM): Used exclusively as a delivery channel for notifications on Android devices. Medicawy does not use any analytics or tracking services of the Firebase platform (such as Firebase Analytics or Crashlytics).
Apple Push Notification service (APNs): Used exclusively as a delivery channel for notifications on iPhone and iPad devices, and is a service provided by Apple as part of the iOS operating system.
Medicawy and its applications do not use any advertising or marketing analytics SDKs from any third party. The data shared with the services mentioned above is limited to the device's notification token only, and no other personal or medical data is shared with them.
Permissions Required on Mobile Applications:
Patient Application: The application requests permission to access the internet and network status for the purpose of running the service, and permission to receive push notifications for the purpose of reminding the patient of bookings and appointments. The patient application does not request any permission to access the camera, geographic location, or photo gallery.
Healthcare Provider Application: In addition to internet and notification permissions, the application requests permission to access the photo gallery solely for the purpose of uploading photos of the clinic or medical facility, and this permission is not used for any other purpose.
Transfer of Personal Data Outside the Arab Republic of Egypt: In order to operate certain limited technical services (such as the notification-sending service via Expo, Google Firebase Cloud Messaging, and Apple Push Notification service), Medicawy processes limited data (such as the device's notification token) on cloud servers that may be located outside the Arab Republic of Egypt, belonging to the providers of these services. In this case, Medicawy is committed to ensuring that data transfer takes place in accordance with the controls set out in Personal Data Protection Law No. 151 of 2020 and its executive regulations regarding the cross-border transfer of personal data, including verifying the availability of an adequate level of data protection at the receiving party, or the existence of alternative contractual or legal safeguards that ensure a level of data protection no less than that prescribed under Egyptian law.
Sensitive Personal Data: Medicawy acknowledges that data related to medical bookings and health consultations is considered "sensitive personal data" under Personal Data Protection Law No. 151 of 2020, since it reveals the user's health condition. Medicawy is therefore committed to applying enhanced security measures to protect this data, including encryption, access restriction, and continuous monitoring, in accordance with approved security standards.
Legal Basis for Processing Personal Data: Medicawy processes personal data in accordance with the provisions of Personal Data Protection Law No. 151 of 2020 and its executive regulations, relying on the following legal bases for data processing:
User Consent: When the user registers and creates an account on the platform or application.
Contractual Necessity: To carry out the appointment booking process and provide the requested services.
Legal Obligation: To comply with the legal and regulatory obligations applicable in the Arab Republic of Egypt.
Legitimate Interest: To improve service quality, develop the platform, and ensure its security.
Data Sharing with Healthcare Providers: When a patient books an appointment with a doctor or medical facility through Medicawy, basic booking data (patient's name, phone number) is shared with the selected healthcare provider solely for the purposes of carrying out the appointment and providing the medical service. The healthcare provider is responsible for maintaining the confidentiality and privacy of the data shared with them, and bears full responsibility for protecting it in accordance with applicable laws. Medicawy does not share any sensitive medical data (such as diagnosis or prescriptions) with any third party.
Cookies and Tracking Technologies: Medicawy uses only essential and necessary cookies to ensure the platform and application function properly, for the following purposes:
Remembering login data (automatic login).
Maintaining the user's session while browsing between pages of the platform.
Ensuring the security of the platform and preventing fraudulent attempts.
Medicawy does not currently use any marketing or analytics cookies from third parties. Users can control cookies through their browser settings and may reject or delete them at any time, noting that this may affect certain core functions of the platform, such as remaining logged in.
Electronic Communications and Messages: Medicawy may send text messages (SMS) and emails to users for the following purposes:
Operational Messages (Mandatory): Booking confirmations, appointment reminders, account security notifications, and service updates. Users cannot unsubscribe from these messages as they are necessary for the operation of the service.
Marketing Messages (Optional): Offers, discounts, and platform news. These require prior consent from the user, and the user may unsubscribe at any time through the link included in the message or through account settings.
Personal Data Retention Period: Medicawy is committed to setting specific time periods for retaining personal data in accordance with Personal Data Protection Law No. 151 of 2020:
Patient Booking Data: Retained throughout the duration of the relationship between the patient and the doctor, and for 5 years after the last booking for legal and medical record-keeping purposes.
Doctor and Medical Facility Data: Retained throughout the period the account is active. In the event the account is cancelled or hidden, the data is hidden and new bookings are prevented, while a copy is retained for legal and tax records.
Marketing Data: Retained until the user withdraws their consent to marketing content.
Security Logs: Security and access logs are retained for 3 years for audit and investigation purposes.
After the retention period ends, the data is deleted or hidden in a manner that cannot be recovered, unless there is a legal obligation to retain it for a longer period.
Rights of Data Subjects: In accordance with Personal Data Protection Law No. 151 of 2020, users enjoy the following rights with respect to their personal data:
Right of Access: The right to request a copy of their personal data stored with Medicawy.
Right of Rectification: The right to request correction of any inaccurate or incomplete data.
Right of Erasure: The right to request deletion of their personal data, subject to what Medicawy may retain in accordance with applicable legal standards and its legitimate interest, as described in the clauses above.
Right to Data Portability: The right to request the transfer of their personal data to another party in a structured, machine-readable format.
Right to Withdraw Consent: The right to withdraw consent to the processing of data for marketing purposes at any time.
Right to Object: The right to object to the processing of their data for certain purposes.
To exercise any of these rights, users may contact Medicawy via email at: [email protected] or through the contact page available on the platform. Requests will be responded to within a period not exceeding 30 days from the date of receipt.
Data Protection Officer (DPO): In compliance with the provisions of Personal Data Protection Law No. 151 of 2020, Medicawy has appointed a Data Protection Officer responsible for overseeing the implementation of the law's provisions and monitoring data protection procedures within the platform. The Data Protection Officer can be contacted via email at: [email protected] for all inquiries and requests related to personal data protection.
Data Breach Notification: In the event of any security breach that is likely to pose a serious risk to users' rights and personal freedoms, Medicawy is committed to notifying affected users and the competent authority (the Personal Data Protection Center) in accordance with the provisions of Personal Data Protection Law No. 151 of 2020. As for minor security breaches that are not likely to result in serious harm or an actual impact on users' rights or freedoms, Medicawy has the right to assess and handle them internally without an obligation to immediately notify all users. Where required, the notification will include a description of the nature of the breach, the data affected, the measures taken to mitigate the damage, and the steps users can take to protect their data.
Children's Data: Medicawy is not directed at children under the age of 18 and does not knowingly collect personal data from children. In the event a parent or legal guardian books a medical appointment for a minor through the platform, they thereby consent to providing the minor's data solely for the purpose of the medical booking. Children's data is considered sensitive data under Personal Data Protection Law No. 151 of 2020, and is handled with an enhanced level of protection.
Contact Us Regarding Privacy: For any inquiries or requests related to this privacy policy and personal data protection, Medicawy may be contacted via:
Amendments to the Privacy Policy: Medicawy may amend or update this privacy policy from time to time to meet legal requirements and regulatory standards, or to develop its data protection practices. Amendments will be published on this page and shall take effect from the date of publication. Users are advised to review this page periodically to stay informed of any changes.