Privacy policy

What we collect

We collect only what the app needs to work. There is no advertising in Dhaki, and we do not track you across other apps or websites.

• Your phone number and name. The phone number is how you sign in and how a clinic recognises you.
• Your medical profile, if you choose to fill it in: date of birth, gender, blood group, allergies, conditions and medications. All of it is optional, and you can change or clear it at any time.
• Appointments and visits with the clinics you have joined, including the times you asked for and what the clinic answered.
• Support messages you send us, and any photo or file you attach to them.
• A profile picture, if you add one.
• A notification token from your phone, so alerts can reach the right device. It identifies the device, not you.

If you run a clinic

A clinic account also holds the details of the practice: its name, phone number, address, category and opening information, along with the team members you invite and the patients who have joined you.

If you tap "Locate me" while filling in your clinic address, the app reads your device location once to save a map link for the clinic. It is used for that and nothing else, and you can type the address by hand instead.

What we do not collect

• We do not collect a patient’s location. Raising an emergency alerts your clinic, but it does not send where you are.
• We do not sell your information, and we do not share it for advertising.
• We do not keep the audio from voice input. See "Voice input" below.

Who can see your information

Your medical profile and your visit history are visible to the clinics you have chosen to join, and only while you are registered with them. A clinic you have not joined cannot see you at all.

Our staff can see account and support information when it is needed to run the service or answer a request you have raised.

Companies that process data for us

We use a small number of providers to deliver parts of the service. They act on our instructions and may not use your information for their own purposes.

• Twilio, to send the one-time code you sign in with.
• Resend, to send email where we use email instead of a text message.
• Google Firebase, to deliver notifications to your device.
• OpenAI, to turn voice input into text when you use the microphone.
• Our hosting and storage provider, which runs the servers and holds uploaded files.

Voice input

Some fields let you dictate instead of typing. When you do, the recording is sent to OpenAI, turned into text, and the text is returned to the field so you can edit it. We do not store the recording or the text on our servers; whether you keep the text is up to you.

How we protect it

Everything travels over an encrypted connection. Files such as photos and attachments are kept in private storage and are reachable only through short-lived links issued to someone already signed in. Access to production systems is limited to the people who need it.

No service can promise perfect security, and we will not pretend otherwise. If a breach affects your information, we will tell you and the relevant authority as the law requires.

How long we keep it

We keep your information while your account is active. If you ask us to delete your account, we remove your personal information unless we are required to keep some of it, for example where a clinic must retain a medical record under Omani law. Support messages are kept while a ticket is open and for a period afterwards so we can answer follow-up questions.

Your choices

• You can view and change your profile and medical details in the app at any time.
• You can leave a clinic, which stops it seeing your record from that point.
• You can turn notifications off in your phone settings.
• You can ask for a copy of your information, ask us to correct it, or ask us to delete your account. Write to us at the address below.

Children

Dhaki is intended for adults. A parent or guardian may manage a child’s care through their own account, and remains responsible for the information they enter. We do not knowingly create accounts for children under 18.

Where your information is held

Our servers and the providers listed above may process information outside Oman. Where that happens, we use providers that commit to protecting it to a comparable standard.

Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top. Where a change is significant, we will tell you in the app.

Contact us

For any question about your information, or to make any of the requests above, email hello@dhaki.me. We are based in the Sultanate of Oman.