Privacy Policy

Last Updated: December 29, 2025

Sphinx Kidney Care Center ("we," "our," or "us") operates the Sphinx mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you register on the App, including but not limited to:

Account Information: Name, phone number, email address
Profile Information: Age, gender, medical history, and other health-related information
Authentication Data: Phone number for SMS verification and authentication
User Type: Patient, Doctor, or Administrator designation

1.2 Health and Medical Information

As a healthcare application, we collect and process sensitive health information including:

Medical service requests (hemodialysis, renal biopsy, laboratory tests, radiology, medication, home nursing care)
Medical appointments and booking information
Doctor consultations and medical communications
Medical records and documentation uploaded by users
Health status and treatment information

1.3 Communication Data

Messages exchanged between patients, doctors, and administrators
Chat history and communication logs
Video call data through our integrated calling services
Push notifications and messaging data

1.4 Technical and Usage Information

Device Information: Device type, operating system, unique device identifiers
Usage Data: App features used, time spent on the app, interaction patterns
Log Data: IP address, browser type, access times, pages viewed
Crash Reports: Error logs and diagnostic information through Firebase Crashlytics
Analytics Data: App performance and user behavior through Firebase Analytics

1.5 Media and Files

Photos and images uploaded for medical documentation
Files and documents shared through the app
Camera access for capturing medical images and documents

1.6 Payment Information

Payment method details (processed through secure third-party payment providers)
Transaction history and receipts
Wallet and payment account information

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Healthcare Services

Facilitate medical service bookings and appointments
Connect patients with healthcare providers
Manage and coordinate medical care delivery
Maintain medical records and treatment history
Enable communication between patients and healthcare providers

2.2 Account Management

Create and manage user accounts
Authenticate users and verify identity
Provide customer support and respond to inquiries
Send administrative information and service updates

2.3 App Functionality

Enable video calling and real-time communication
Process and deliver push notifications
Store and retrieve user preferences
Provide multi-language support (English and Arabic)

2.4 Analytics and Improvement

Monitor and analyze app usage and performance
Identify and fix technical issues
Improve app features and user experience
Conduct research and development

2.5 Security and Compliance

Detect and prevent fraud and unauthorized access
Ensure compliance with legal obligations
Protect the rights and safety of users
Monitor for security threats

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Healthcare Providers

We share relevant medical information with doctors and healthcare professionals within our network to facilitate your care and treatment.

3.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

Firebase Services (Google): Authentication, cloud storage, database, analytics, messaging, and crash reporting
Zego Cloud: Video calling and real-time communication services
Sentry: Error tracking and performance monitoring
Payment Processors: Fawry, OPay, and other payment service providers
Cloud Storage: Secure storage of medical records and documents

3.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to:

Comply with legal processes
Enforce our terms and conditions
Protect our rights, privacy, safety, or property
Respond to emergency situations

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

3.5 With Your Consent

We may share your information with third parties when you provide explicit consent.

4. Data Storage and Security

4.1 Data Storage

Your information is stored securely using:

Cloud Firestore: For real-time database storage
Firebase Storage: For media files and documents
Local Secure Storage: Encrypted local storage on your device using Flutter Secure Storage
Hive Database: Local caching for offline functionality

4.2 Security Measures

We implement industry-standard security measures to protect your information:

End-to-end encryption for sensitive data transmission
Secure authentication using Firebase Authentication
Regular security audits and vulnerability assessments
Access controls and user permission management
Secure HTTPS connections for all data transfers
Multi-factor authentication via SMS verification

Important: While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your personal information for as long as necessary to:

Provide our services and maintain your account
Comply with legal, regulatory, and medical record-keeping requirements
Resolve disputes and enforce our agreements
Maintain medical history for continuity of care

Medical records and health information are retained in accordance with applicable healthcare regulations and may be kept for extended periods as required by law.

6. Your Rights and Choices

6.1 Access and Update

You have the right to:

Access your personal information stored in the app
Update or correct inaccurate information through your profile settings
Request a copy of your data

6.2 Data Deletion

You may request deletion of your account and personal information by contacting us. Please note that:

Some information may be retained for legal or legitimate business purposes
Medical records may be retained as required by healthcare regulations
Deletion may take up to 30 days to complete

6.3 Communication Preferences

You can control:

Push notification settings through your device or app settings
Email communication preferences
SMS notifications (note: some SMS messages are essential for authentication)

6.4 Opt-Out Rights

You may opt out of analytics tracking
You can disable location services through device settings
You may refuse to provide certain information (which may limit app functionality)

7. Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our App, you consent to the transfer of your information to these countries.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Third-Party Services

Our App integrates with third-party services that have their own privacy policies:

Google Firebase: Firebase Privacy Policy
Google Play Services: Google Privacy Policy
Zego Cloud: Video calling service provider
Sentry: Error tracking service

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Maintain user sessions and authentication
Remember user preferences and settings
Analyze app usage and performance
Provide personalized content and features

You can control cookie preferences through your device settings, though this may affect app functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

Posting the updated policy in the app
Sending a notification through the app or email
Updating the "Last Updated" date at the top of this policy

Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Permissions Required

The App requires the following device permissions:

Internet Access: To connect to our services and enable communication
Camera: To capture medical images and documents
Notifications: To receive appointment reminders and important updates
Vibration: For notification alerts
Storage: To save and access medical documents and images
Phone State: For call-related features and device identification

13. Your Consent

By using our App, you consent to:

The collection and use of your information as described in this Privacy Policy
The processing of your health and medical information for healthcare purposes
The sharing of information with healthcare providers and service providers as outlined
The storage of your data on secure cloud servers

14. Compliance with Healthcare Regulations

We are committed to complying with applicable healthcare privacy regulations, including but not limited to local data protection laws. We implement appropriate administrative, technical, and physical safeguards to protect health information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Sphinx Kidney Care Center

Email: privacy@sphinxkcc.com

Website: https://sphinxkcc.com

App Package: com.sphinx.kidney.care.center.app

We will respond to your inquiry within 30 days of receipt.

Data Protection Officer Contact:
For specific data protection inquiries, you may contact our Data Protection Officer at: dpo@sphinxkcc.com

16. Dispute Resolution

Any disputes arising from this Privacy Policy or our data practices will be resolved through:

Good faith negotiations between the parties
Mediation or arbitration as agreed upon
Applicable legal jurisdiction in accordance with local laws