Məxfilik Siyasəti

1. Data We Collect

We collect several types of information in connection with the operation of our Platform:

1.1 Information You Provide Directly

• Account registration data: full name, email address, phone number, and password when you create an account.
• Profile data: any additional information you add to your profile, such as preferred language or family member details.
• Partner application data: for healthcare providers applying to be listed, we collect organization name, contact details, professional credentials, and descriptions of services.
• Reviews and ratings: content you submit when reviewing healthcare providers.
• Communications: messages or inquiries you send to us via email or contact forms.

1.2 Information Collected Automatically

• Usage data: pages visited, search queries performed, links clicked, time spent on pages, and other interaction data.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, and referral URLs.
• Location data: approximate geographic location derived from your IP address when you use the website. The mobile app may read your device location with your permission, but that reading stays on your device and is never sent to us — see Section 7.3.
• Cookie data: see Section 4 below for details on cookies and similar tracking technologies.

1.3 Information from Third Parties

If you choose to log in using a third-party service such as Google, we receive basic profile information (name and email address) from that service, subject to your privacy settings with that provider.

2. How We Use Your Data

We use the information we collect for the following purposes:

• Providing the Platform: to operate, maintain, and improve the Platform, including personalizing search results and displaying relevant healthcare providers.
• Account management: to create and manage your account, authenticate your identity, and enable you to access Platform features.
• Communications: to send you service-related notices, updates about your account, and, where you have consented, promotional messages and newsletters.
• Analytics: to understand how users interact with the Platform, measure the effectiveness of features, and make data-driven improvements.
• Safety and security: to detect, investigate, and prevent fraudulent activity, abuse, and other harmful conduct on the Platform.
• Legal compliance: to comply with applicable laws, regulations, and legal processes, and to enforce our Terms of Use.

We process your personal data on the following legal bases: performance of a contract (providing the services you requested), legitimate interests (improving and securing the Platform), your consent (marketing communications), and legal obligation (compliance with applicable law).

3. Data Sharing

We may share your information only in the following limited circumstances:

• Service providers: we engage trusted third-party companies and individuals to perform services on our behalf, such as cloud hosting (Supabase), analytics, email delivery, and payment processing. These parties are contractually obligated to use your data only as directed by us and in accordance with this Privacy Policy.
• Healthcare partners: when you interact with a healthcare provider listing (e.g., submit a booking request or review), the relevant provider may receive information necessary to fulfill that interaction.
• Legal requirements: we may disclose your information if required to do so by law or in good-faith belief that such action is necessary to comply with a legal obligation, protect our rights, prevent fraud, or protect the safety of users.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all assets, your data may be transferred as part of that transaction. We will notify you via email or prominent notice on the Platform before your data becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as local storage and session storage) to enhance your experience on the Platform. Cookies are small data files placed on your device that allow us to recognize your browser and remember certain information.

We use the following types of cookies:

• Essential cookies: required for the Platform to function properly, including user authentication sessions and security tokens. These cannot be disabled.
• Functional cookies: remember your preferences, such as your selected language and dark/light mode setting.
• Analytics cookies: help us understand how visitors use the Platform, which pages are most popular, and how to improve the user experience. We use anonymized or aggregated data for this purpose.

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Most browsers also accept cookies automatically; you can set your browser to refuse cookies or alert you when cookies are being sent.

5. Your Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may request that we correct inaccurate or incomplete personal data.
• Right to erasure:you may request that we delete your personal data in certain circumstances (also known as the "right to be forgotten").
• Right to restriction: you may request that we restrict the processing of your data in certain circumstances.
• Right to data portability: you may request a copy of your data in a structured, machine-readable format.
• Right to object: you may object to the processing of your personal data in certain circumstances, including for direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@medicore.az. We will respond to your request within thirty (30) days. We may need to verify your identity before processing your request.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

If you delete your account, we will delete or anonymize your personal data within 90 days of your request, except where we are required by law to retain certain information for longer periods. Reviews you have submitted may be retained in anonymized form for the integrity of our rating system.

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, regular security assessments, and strict access controls.

7. The Medicore Mobile App

The Medicore app for iOS and Android collects the following in addition to everything described above. All of it is tied to your account, none of it is sold, and none of it is used for advertising or tracking across other companies' apps or websites.

7.1 Messages

When you write to a clinic, pharmacy or laboratory, we store the text of your messages, together with any photographs and voice notes you attach. Attachments are held in private storage that only the two participants of that conversation can read. Conversations are kept until you or the other party deletes them, or until your account is closed.

7.2 Family Members and Visit History

If you use the family feature, we store the names, relationship and dates of birth you enter for your relatives, and the visits you record for each of them, including the venue, the date and any notes you write. This is health-related information about people other than yourself: please add it only for relatives on whose behalf you are entitled to act. Only your account can read these records; they are removed when you delete the entry or close your account.

7.3 Location

With your permission the app reads your device location while it is open, in order to centre the map on you and show what is nearby. Your location is used on the device and is not transmitted to us or stored on our servers. Refusing the permission only means the map opens on the city centre instead.

7.4 Notifications

If you allow notifications, we store a push token issued by Apple or Google together with your device platform, so that we can deliver alerts about new messages. The token is deleted when you sign out of the app, and you can switch individual notification types off in the app's settings.

7.5 Camera, Photos and Microphone

The app asks for access to your camera, photo library and microphone only when you attach a picture or record a voice note in a conversation, or set a profile photo. Nothing is captured in the background, and refusing these permissions leaves the rest of the app fully usable.

8. Contact for Data Requests and Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection contact:

We take privacy concerns seriously and will endeavor to resolve any complaint in a timely and fair manner. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.