Privacy policy

The Services are operated by Kashf 24/7, based in the Arab Republic of Egypt, which acts as the controller of the personal data described in this policy.

[Add registered legal entity name, commercial registration number, and registered address]

Doctors and medical institutions who provide care through Kashf are independent healthcare providers. They are responsible for the medical records they create and keep in the course of treating you, in line with their professional and legal obligations.

We collect only the information we need to provide and improve the Services. The information depends on how you use Kashf.

Information you give us — patients

• Account details: name, mobile number, email address (optional), password, gender, date of birth, and profile photo (optional).
• Family members: if you book for a child or another family member, their name, age, gender, and relationship to you.
• Health information: the specialty you choose, symptoms or the reason for your visit, medical history you choose to share, and any reports, test results, images, or prescriptions you upload.
• Booking details: the doctor, consultation type (clinic, hospital, home visit, voice or video call), date and time, and — for home visits — the address and access instructions you provide.
• Reviews and ratings you leave about doctors, and messages you send to our support team.

Information you give us — doctors and medical institutions

• Professional details: name, specialty, qualifications, years of experience, languages, profile photo, and a professional biography.
• Verification documents: Egyptian Medical Syndicate registration, practising licence, national ID, and other documents we need to verify your identity and right to practise.
• Practice details: clinic or hospital addresses, working hours, availability, consultation types offered, and prices.
• Payout details: bank account or e-wallet information used to pay you for consultations.
• Consultation records: notes, diagnoses, prescriptions, or referrals you record for patients through the app.
• For institutions: institution name, licensing information, contact person, and the doctors affiliated with the institution.

Information created when you use the Services

• Payment information: the payment method, amount, and status of each transaction. Card payments are processed by our licensed payment partners; Kashf does not store your full card number or security code.
• Consultation information: the date, duration, and status of calls and appointments. Voice and video consultations are transmitted in real time and are not recorded by Kashf unless you are told beforehand and, where required, give your consent.
• Communications: in-app messages between patients and doctors and notifications we send you.

Information collected automatically

• Device and app information: device model, operating system, app version, language, time zone, and device identifiers used for security and push notifications.
• Usage information: screens visited, searches, features used, and interactions, collected to operate and improve the Services.
• Diagnostics: crash logs and performance data.
• Log data: IP address, access times, and error logs from our servers and website.

Device permissions

The apps ask for the following permissions only when you use a feature that needs them. You can turn any permission off in your device settings; the related feature may then stop working.

• Location (while using the app): to show doctors near you and to help you set a home visit address. We do not collect your location in the background.
• Camera and microphone: to hold voice and video consultations and to photograph documents you choose to upload.
• Photos and files: to upload medical reports, prescriptions, or verification documents that you select.
• Notifications: to send booking confirmations, reminders, and consultation alerts.

Information from others

A doctor or institution may add information to your consultation record (for example, a prescription). A family member may provide your details when booking on your behalf. Payment partners confirm whether a payment succeeded. We may also verify a doctor’s registration with the Egyptian Medical Syndicate and other official sources.

• To create and manage your account and verify your mobile number with a one-time code.
• To help you find and compare doctors, and to book, reschedule, or cancel appointments.
• To connect you with your chosen doctor or institution and enable voice or video consultations and home visits.
• To process payments, refunds, and doctor payouts, and to keep financial records.
• To verify doctors and institutions before they appear on Kashf and to keep their profiles accurate.
• To send service messages such as booking confirmations, reminders, and changes to our terms or this policy.
• To provide customer support and handle complaints and disputes.
• To keep the Services safe: preventing fraud, abuse, and unauthorised access, and enforcing our terms.
• To analyse usage and fix problems so we can improve the Services. Where possible we use aggregated or de-identified data for this.
• To send marketing messages about Kashf services, only where you have agreed or the law allows it. You can opt out at any time.
• To comply with legal obligations and respond to lawful requests from authorities.

We do not use your health information for advertising, and we do not use it to build marketing profiles.

We process personal data in line with the Egyptian Personal Data Protection Law No. 151 of 2020 and other laws that apply to us. Depending on the purpose, we rely on:

• Performance of a contract: to provide the Services you request, such as booking and consultations.
• Consent: for health information and other sensitive data, optional device permissions, and marketing. You can withdraw consent at any time; this does not affect processing already carried out.
• Legal obligations: for example, keeping financial records and responding to lawful requests.
• Legitimate interests: such as securing the Services, preventing fraud, and improving our features, where these interests are not overridden by your rights.

If you use the Services from the European Union, the United Kingdom, or another region with its own data protection law, you have the rights that law gives you, and we rely on the equivalent legal bases above.

We do not sell your personal data, and we do not share it with data brokers or advertisers. We share information only as described below.

• With the doctor or medical institution you book: your name, contact details, booking details, and the health information you choose to share so they can provide care. For home visits, they receive the visit address.
• With patients (for doctors and institutions): your public profile — name, photo, specialty, qualifications, experience, locations, availability, prices, and ratings.
• With service providers who work on our behalf under contracts that require them to protect your data and use it only to provide their service: cloud hosting, SMS and verification codes, payment processing, voice and video calling, push notifications, customer support tools, and crash reporting and analytics.
• With payment partners and banks to process payments, refunds, and payouts.
• With authorities when required by law, court order, or a lawful request, or when necessary to protect the life, safety, or rights of any person.
• In a business transfer such as a merger, acquisition, or sale of assets, in which case the recipient must continue to protect your data under this policy.
• With your consent or at your direction in any other case.

Our website uses cookies and similar technologies that are necessary for it to work — for example, to remember your language. Where we use analytics, we use it to understand how the Services are used and to improve them.

Kashf does not track you across apps and websites owned by other companies for advertising, and does not share your data with data brokers. If this ever changes, we will update this policy and ask for your permission first, including through Apple’s App Tracking Transparency prompt on iOS.

We keep personal data only for as long as we need it for the purposes in this policy:

• Account information: while your account is active. When you delete your account, we delete or anonymise it within 30 days, except as described below.
• Health and consultation records: for as long as required by the laws and professional rules that govern medical records in Egypt, after which they are deleted or anonymised.
• Payment and transaction records: for the period required by tax and accounting laws.
• Doctor verification documents: while the doctor is active on Kashf, and afterwards for as long as needed to resolve disputes or meet legal obligations.
• Server logs and diagnostics: for a limited period, typically no longer than 12 months.

Data kept after account deletion is restricted to the purpose it is kept for and is not used for anything else. Backups are overwritten on a regular schedule.

We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit (TLS), encryption of stored data where appropriate, access controls based on job role, verification codes for sign-in, and monitoring for unauthorised access. Staff and service providers with access to personal data are bound by confidentiality obligations.

No method of transmission or storage is completely secure. If a data breach affects your personal data, we will notify you and the competent authorities as required by law.

Subject to applicable law, you have the right to:

• Know what personal data we hold about you and receive a copy of it.
• Correct inaccurate or incomplete data. You can edit most profile information directly in the app.
• Delete your account and personal data (see section 10).
• Withdraw your consent at any time, including for health data processing and marketing.
• Object to or restrict certain processing.
• Receive your data in a portable format where technically feasible.
• Be notified of a breach affecting your personal data.
• Lodge a complaint with the Personal Data Protection Center in Egypt, or with the data protection authority where you live.

You can also turn off device permissions in your device settings, turn off push notifications, and unsubscribe from marketing messages using the link or instructions in the message.

To exercise these rights, contact us using the details in section 15. We will respond within the time required by law, and we may need to verify your identity before acting on a request.

You can delete your Kashf account at any time, in either app:

• In the app: open your profile or settings and choose “Delete account”, then confirm.
• By request: if you can’t access the app, email us from the address linked to your account, or send a request from your registered mobile number, with the subject “Delete my account”. Include the name and mobile number on the account.

When you delete your account, we delete your profile, account details, saved family members, uploaded files, and app preferences, and we cancel any upcoming bookings. We aim to complete deletion within 30 days.

Some information may be kept for longer where the law requires it or where it is needed to resolve disputes, prevent fraud, or enforce our agreements — for example, medical records created by your doctor and payment records. That information is kept securely, restricted to that purpose, and deleted when the retention period ends (see section 7).

You may also ask us to delete specific data, such as an uploaded report, without deleting your whole account.

Kashf accounts are for adults aged 18 and over. The Services are not directed at children, and we do not knowingly allow children to create accounts.

A parent or legal guardian may book care for a child and share the child’s health information from their own account. The parent or guardian is responsible for that information and can exercise the child’s privacy rights on the child’s behalf.

If you believe a child has given us personal data without a parent’s or guardian’s involvement, contact us and we will delete it.

Some of our service providers may store or process data outside Egypt. When this happens, we transfer data only as permitted by the Egyptian Personal Data Protection Law, and we use contractual and technical safeguards so that your data receives a level of protection consistent with this policy.

The Services may link to websites or services run by others, such as payment pages, app stores, or social media. Their own privacy policies apply to how they handle your data, and we encourage you to read them.

We may update this policy from time to time. We will change the “Last updated” date above, and if the changes are significant we will notify you in the app or by another appropriate method before they take effect. Where the law requires, we will ask for your consent again.

For questions about this policy, to exercise your rights, or to request account deletion, contact Kashf 24/7’s privacy team:

[Add privacy contact email, e.g. privacy@your-domain]

[Add support phone / WhatsApp number and postal address]

You can also reach us through the Contact section of this website or the help and support section of the app.