1. Introduction and scope
This Privacy Policy describes how TrustyDr Healthcare, operated by TrustyDr ("we," "us"), collects, uses, and protects information in connection with the TrustyDr Healthcare App — for both patients and providers (doctors and facility staff). "App," "Provider," and "Appointment" carry the same meanings given to them in the Patient Terms of Service.
TrustyDr Healthcare is operated separately from TrustyDr Commerce (our related platform for buying and selling products), which has its own Privacy Policy for its own users. This Policy covers Healthcare, and — as described in Section 10 below — the Marketplace feature reachable from within the Healthcare App.
This Policy is provided in English, Arabic, and Kurdish. Each version is intended to convey the same meaning.
2. Information we collect — every account
2.1 Account and consent information
When you create an account, we collect your account identifier and phone number, and — once you accept our Terms of Service and this Privacy Policy — we record that acceptance: which document, which version, when, and the language you accepted in.
2.2 Activity and audit records
We keep records of certain actions taken in the App (such as who performed a given action and when) for security, accountability, and dispute-resolution purposes.
3. Information we collect — patients
3.1 Profile and health-adjacent information
We collect the information you provide to create your patient profile (name, contact details) and information generated by your use of the App — the Providers and facilities you book with, your Appointment history, and, where you choose to provide it, health information you enter or a Provider records as part of your care with them.
3.2 Family/dependent bookings
Where you book an Appointment on behalf of another person in your care, we record both your own identity (as the person who created the booking) and the actual patient's identity separately — the patient's own record is not merged with yours.
4. Information we collect — providers
4.1 Professional and facility information
If you register as a doctor or facility, we collect your professional information (licensing/registration details, specialty, qualifications) and, where applicable, facility information (name, location, staff members and their roles).
4.2 Patient information you access
As a provider, the App gives you access to information about the patients you treat, necessary to provide care and administer your practice. Your own obligations regarding that information are set out in the Provider Terms of Service, not repeated here.
5. How we use information
We use the information described above to: operate accounts and verify acceptance of our legal terms; connect patients with Providers and enable booking; enable providers and facilities to deliver and manage care; maintain security and accountability records; and communicate with you about the App.
6. Consent and your acceptance
Your acceptance of our Terms of Service and this Privacy Policy is recorded with the version you accepted and a system-generated timestamp — this acceptance record cannot be altered by you or by us after the fact; new acceptances are added, not edited, so a full history is preserved.
7. Data minimization and security
We collect only the information reasonably necessary for the purposes described in this Policy, and access to sensitive collections (such as consent/acceptance records and audit logs) is restricted so that it can only be written by our backend systems, never directly by a client application.
As a digital platform serving users in Iraq, TrustyDr Healthcare is also within the scope of the Iraqi Communications and Media Commission's Framework Regulations for Digital Platforms and Services (to the extent it applies to a healthcare-appointment platform — see the governing-law note in Section 13), which requires covered platforms to apply international best practices for personal data protection pending Iraq's own comprehensive data protection law.
No Iraqi law specifically classifies health data as a distinct, more sensitive category requiring heightened handling beyond the general professional-confidentiality duty described in the Provider Terms of Service — we nonetheless treat health information as sensitive as a matter of our own practice, restricting it to the providers you interact with and our backend systems.
We do not make specific claims about encryption standards or security certifications beyond what has been independently verified for our infrastructure providers.
8. Where information is processed
Our App is built on cloud infrastructure (Google Cloud/Firebase). Your information may be processed and stored outside Iraq as a result.
9. Who we share information with
We share information with:
The Providers and facilities you interact with, to the extent necessary for them to provide care to you.
Our infrastructure providers (cloud hosting), who process information on our behalf to operate the App.
TrustyDr Commerce's order-processing system, only as described in Section 10 below, when you use the Marketplace.
Authorities, where required by law, or in connection with a data security incident as described in Section 12 below.
We do not sell your information, and we do not share it with advertisers or analytics providers.
10. TrustyDr Marketplace — data shared with TrustyDr Commerce
This section applies only if you use the Marketplace feature to browse or order products, or — as a provider — your facility sells products through it.
Store/product discovery. Browsing the Marketplace and viewing store or product information is low-sensitivity, catalog-level data — no patient-identifying information is shared with a Store merely by browsing.
Placing an order. When you place an order, your name and delivery address are shared with TrustyDr Commerce's order-processing system and the Store fulfilling your order — and only that. Your medical record, Appointment history, and clinical notes are never shared as part of an order, regardless of what you are ordering.
Pharmacy/prescription-linked orders. Where an order references a specific prescription or product tied to your care, only that specific reference is shared for fulfillment purposes — never your broader prescription or treatment history.
Order and delivery information. Order details (products, quantities, price) and delivery status are processed by TrustyDr Commerce's order-processing system to fulfill your order, the same as described in TrustyDr Commerce's own Privacy Policy for orders placed directly on that platform.
Future functionality. If TrustyDr Healthcare and TrustyDr Commerce build additional data flows between the two platforms beyond what is described above, we will update this Policy to describe them before they take effect.
TrustyDr Healthcare and TrustyDr Commerce remain separate services with separate data systems; information entered on one is not automatically available on the other outside the specific flows described above.
11. Retention and deletion
Acceptance-history and audit-log records are retained permanently for accountability purposes. Account and care-record data is retained while your account is active, consistent with our account lifecycle architecture (see the Terms of Service for how account deletion and deactivation work).
12. Data security incidents
If a data security incident affecting your personal information occurs, we will notify affected users and the appropriate Iraqi authorities promptly, consistent with applicable law.
13. Governing law
This Policy, and our handling of your information under it, is governed by the laws of Iraq.
14. Cookies and local storage
We do not use cookies or local storage for advertising or analytics. Any local data stored on your device is solely functional (for example, to keep you signed in), never used for tracking or advertising.
15. Children's privacy
Where you use the App on behalf of a minor in your care (Section 3.2), we collect only the information necessary to provide that care, tied to the minor's own record. We do not knowingly collect information directly from a child using their own independent account.
16. Your rights and choices
You may view your current consent status within the App. For questions about your information, or to request that we look into a specific concern, contact us using the details in Section 18.
17. Changes to this Policy
We may update this Privacy Policy from time to time. Where a change is material, you will be asked to review and accept the updated Policy, consistent with our version-tracked acceptance system.
18. Contact
Questions about this Privacy Policy can be sent to support@trustydr.com.