Privacy Policy

This platform is operated by MOHANO FOR MEDICAL SOLUTIONS. We are committed to protecting the privacy of users' personal and medical data in accordance with the highest standards of security and confidentiality, and in compliance with applicable laws and regulations. This policy explains how data is collected, used, stored, shared, and protected when you use the platform and its related services.
By using the platform, you agree to this Privacy Policy and to the collection, use, and processing of your data as described below.
1. Information We Collect
We may collect and process the following types of data:
a. Personal Information
  • Full name.
  • Phone number.
  • Email address.
  • Date of birth.
  • Gender.
  • Personal account information.
b. Medical Information
  • Symptoms and medical history.
  • Medical reports and tests.
  • Prescriptions.
  • Information from medical consultations.
c. Device and Usage Information
  • Device type and operating system.
  • IP address.
  • Login and logout data.
  • Pages and features used within the platform.
  • Duration and timing of use.
d. Payment Information
Payments may be processed through external, secure payment service providers. We do not directly store sensitive bank card data.
2. How We Use Your Information
Data is used for the following purposes:
Some data may be used in anonymized or aggregated form (Anonymized/Aggregated) for analytical purposes and to improve service quality without revealing user identity.
  • Providing medical services and health consultations.
  • Managing accounts, appointments, and orders.
  • Improving the quality of services and user experience.
  • Sending notifications, alerts, and updates.
  • Complying with legal and regulatory requirements.
  • Protecting the platform and preventing fraud or misuse.
  • Statistical analysis, performance improvement, and service development.
3. Data Security and Protection
The platform is committed to taking appropriate security and technical measures to protect personal and medical data from unauthorized access, modification, disclosure, or loss.
Protection measures include:
  • Encrypting communication using HTTPS/TLS protocols.
  • Encrypting data both in transit and at rest.
  • Encrypting databases, medical files, and sensitive records.
  • Applying role-based access controls based on user type.
  • Monitoring security activity and detecting intrusion attempts or unauthorized access.
  • Regular data backups.
  • Using secure systems and servers to protect data.
4. Access and Activity Monitoring Logs
The platform records and monitors all access and usage activity related to user data and medical files for security, legal compliance, and service quality purposes.
This includes:
  • Logging login and logout events.
  • Recording date and time of data access.
  • Recording modifications made to medical files or accounts.
  • Recording device information or IP address used at sign-in.
  • Monitoring any unauthorized access attempts or suspicious activity.
5. Data Sharing
The platform does not sell or rent personal or medical data to any third party. Data may be shared only in the following cases:
  • With healthcare providers connected to the requested service.
  • With technical or operational service providers required to operate the platform.
  • When there is a legal obligation or formal request from competent authorities.
  • To protect the security of users or the platform, or to prevent fraud and misuse.
6. Service Providers and Data Protection
The platform may rely on external technical service providers to operate infrastructure, cloud storage, or data processing — including services such as Amazon Web Services (AWS) and other approved providers.
The platform is committed to working only with service providers that apply appropriate data security and protection standards. Business Associate Agreements (BAA) or equivalent data-processing agreements may be signed when necessary to ensure protection of user information and medical data.
7. Data Retention
The platform retains data only for the period necessary to provide services or to comply with legal, regulatory, or security requirements.
8. Data Deletion and Account Termination
Users have the right to request deletion of their account and personal data in accordance with applicable laws and regulations, subject to any legal or regulatory obligations that may require retention of certain data for a specified period.
The platform will securely delete or anonymize personal and medical data within a period not exceeding 30 days from:
  • A user's account deletion request.
  • Expiration of a subscription or remaining credits.
  • A user discontinuing use of the platform per the approved retention policy.
Limited records may be retained only when necessary for legal, regulatory, security, or accounting purposes.
9. User Rights
Users have the right to:
  • Access their personal and medical data.
  • Request modification or correction of data.
  • Request deletion of their account or data in accordance with applicable laws.
  • Withdraw consent to data processing where legally possible.
  • Submit inquiries or complaints regarding privacy and data protection.
10. International Data Transfers
Some data may be stored or processed outside the user's country of residence through approved service providers, with appropriate security measures applied to protect the data.
11. External Links and Services
The platform may contain links or services belonging to third parties. We are not responsible for the privacy policies or practices of those third parties.
12. Changes to the Privacy Policy
The platform reserves the right to modify this Privacy Policy at any time. Users will be notified of any material changes via the application, email, or other appropriate means.
13. Contact Us
For any inquiries about this Privacy Policy, your data, or your rights as a user, you can reach us through the platform's official support channels or by email at info@afyti.co.