Privacy Policy
Last updated 20 October 2026
Hakimy is software that clinics and practitioners in Egypt use to take bookings, send appointment messages, and keep patient records. This policy explains what we collect, why, who can see it, and how to have it deleted.
Who is responsible
We are responsible for your account details. The records a clinic keeps about you, such as your patient record and session notes, are written and controlled by that clinic and your practitioner. We store and protect them on their behalf.
What we collect
- Account details: your name and email from Google sign-in, and the mobile number you confirm with a WhatsApp code.
- Family members you add to your account, such as a child or a parent.
- Appointments and waitlists: who you booked, where, and when, and what happened to the booking.
- Intake answers you give a clinic before a first visit.
- Records your clinic keeps: your patient record, and session notes and photos written by your practitioner.
- Clinic staff details: name, email, and role, for people who work at a clinic.
- Technical data: error reports and usage counts, tied only to internal IDs, never to your name, phone, or email.
How we use it
- To run bookings, waitlists, and records for your clinics.
- To send you WhatsApp messages about your appointments, and email invitations to clinic staff.
- To keep the service secure and fix problems.
We don't sell your data or use it for advertising. Messages never contain your intake answers or session notes.
Who can see your information
- Each clinic sees only its own appointments and records with you. A clinic never sees your history at another clinic.
- Session notes are seen only by the practitioner who wrote them, including at other clinics where they work. Every time a note is opened, it is logged.
- Our operators see account and booking details to run the service, but never session notes or intake answers.
Service providers
We use these providers to run Hakimy:
- Convex: database, in the EU (Dublin, Ireland).
- Vercel: website hosting.
- Twilio and WhatsApp (Meta): appointment messages.
- Resend: email.
- UploadThing: logos, photos, and note photos.
- Google: sign-in.
- Sentry: error reports, in the EU.
- PostHog: usage counts, in the EU.
Keeping and deleting your data
We keep your data while you have an account. You can ask to delete it from your account page. Nothing is deleted for 14 days, and you can cancel in that time. Your practitioners are told, so they can download their notes. After 14 days, your account, family members, intake answers, records, and session notes are deleted at every clinic. Past appointments stay without your name or contact details, so clinics' schedules stay correct.
Some copies are outside our control: database backups expire on their own schedule, Twilio keeps its own message logs, and messages already delivered stay on the phones that received them.
Your rights
Under Egypt's Personal Data Protection Law (No. 151 of 2020), you can ask to see, correct, or delete your personal data. Email us and we will reply.
Security
Access to production data is limited to named people with two-factor sign-in. Session notes and note photos never get a public link.
Changes and contact
If we change this policy, we update the date above. For any question, email us:
support@hakimy.app