Privacy

The clinic is in charge of its patients' records

Each clinic decides what it records about its patients and who on its staff can see it. Doktor stores and protects that information for the clinic, and uses it only to run the service.

If you are a patient and want to see, correct or ask about your record, contact your clinic. They can see and change it; we will help them if needed.

What is stored

• About patients: what the clinic enters, such as name, phone, date of birth, medical background, visits, prescriptions, lab results, X-rays and other files, appointments and bills.
• About staff: name, email, phone, role, and a record of the changes each person makes.
• When something breaks on screen: the error message, the page it happened on (without patient names or search terms), the type of browser, and which account it happened to. This is used only to fix problems.
• Your browser keeps your sign-in and your language, number and theme choices on your device.

What we don't do

• We don't sell or rent anyone's information, and there is no advertising.
• We don't send messages to patients. Reminder buttons open WhatsApp on the clinic's own phone with the text ready; the clinic decides whether to send it.
• We don't look at patient records except when the clinic asks us to help with a problem, or when the law requires it.

Who can see what inside a clinic

• Staff only see their own clinic's information. One clinic can never see another's.
• Each role sees only what it needs: receptionists don't see medical records, and doctors and nurses don't see billing unless they are also an admin.
• New staff can't see anything until an admin approves them and gives them a role.
• Changes are recorded with who made them and when. Records are never deleted: mistakes are voided, cancelled or archived, so the history stays complete.

Where it is kept and how it is protected

• The database and uploaded files are hosted by Supabase in Frankfurt, Germany (EU). The website itself is served by Vercel.
• Everything travels over an encrypted connection (HTTPS) and is encrypted where it is stored.
• X-rays and other files are only reachable through short-lived private links given to signed-in staff of that clinic.

Backups and leaving

A clinic's admin can download all of the clinic's records as a file at any time from Settings. That file holds patient information, so the clinic must keep it safe.

A clinic that stops using Doktor can take that file with it. Ask us if you need the clinic's data removed from the service, and we will agree with the clinic what must be kept by law first.

Changes and contact

If we change how information is handled, we will update this page and the date at the top, and tell clinic admins about important changes.

Questions about your own record: ask your clinic. Questions about Doktor itself: email abdullah0dabbagh@gmail.com.