Privacy Policy

Data we collect

Identity details (name, mobile number, email, national ID when needed); patient and health details, attachments and vital readings entered by the customer, doctor or care provider; the visit address; a device identifier used to send notifications; and usage logs such as IP address and device type.

Location

Customers share location only when they choose to pin the visit address on the map. Care providers share location only at the moment they check in or out of a visit, to confirm they are at the address. We never track location in the background.

Why we collect it

To provide home care, carry out medical review, match a suitable care provider, schedule visits, process payments and refunds, contact you about your request, and meet legal requirements. We do not sell your data, and we never use your personal or health data for advertising (see "Ad measurement").

Messages and notifications

We send verification codes, request updates and visit reminders by SMS, email and app notifications. You can turn app notifications off at any time in your device settings.

Storage and security

All data travels over encrypted connections (HTTPS/TLS), and attachments and sensitive medical data are encrypted at rest. Access is limited by role (customer, doctor, care provider, admin).

Service providers

Trusted providers process data on our behalf, only as needed: MyFatoorah for payments (we never store your card details), 4jawaly for SMS, Brevo for email, Google Firebase for app notifications, and DigitalOcean for cloud hosting.

Ad measurement

To see how well our ad campaigns work, we use measurement tools from Meta (Facebook and Instagram), TikTok and Snapchat on the public pages of the website only (such as home, services, packages and articles), and AppsFlyer in the mobile app. These tools collect technical data such as a device or browser identifier and the pages you visited, and in the app: signing in, sending a care request and the payment amount. They do not run on the care-request form or inside your account, and we never send them your name, mobile number, email or any health information. On iPhone, tracking is only on after you allow it; you can turn it off at any time in your device's privacy settings (or delete the advertising ID on Android), or block cookies in your browser.

Sharing medical data

Medical data is not shared with any third party without your explicit consent, except the reviewing doctor and the care provider assigned to your case, or where a competent authority requires it by law.

Consent records

We keep a record of when you accepted the terms and this policy, and which version you accepted.

Your rights and deleting your account

You can view and correct your data. You can delete your account at any time from the account settings in the app or on the website, or at smcc.sa/delete-account. Deleting removes or anonymizes your account data; we keep only the medical and financial records the law requires.

Retention

Case data is kept as long as needed to provide the service and as long as applicable regulations require, then deleted or anonymized.

Contact us

For any question about your data or this policy, contact us at smcc.sa/contact.