Privacy Policy
Draft — last updated 19 July 2026
Who we are
Your association (the data controller) uses this platform (the data processor) to receive and process medical-support requests.
Data we collect
Identity data (national ID number, full name, date of birth), contact data (mobile number, email, city), and health data — sensitive data — including your condition description, the support type requested, and documents you upload such as medical reports and ID copies.
Why we collect it
To assess your request, verify your identity, decide on support, and notify you of status changes. Your data is never used for any other purpose, sold, or shared for marketing.
Where it is stored
On servers inside the Kingdom of Saudi Arabia, accessible only to your association's authorized staff and the platform operator for operational support. All access to files is authorized and logged.
Notifications
When enabled, you receive generic status messages (never containing medical details) by email or SMS through an external delivery provider.
Your rights
You may request access to, correction of, or deletion of your data, and you may withdraw your consent at any time by contacting your association. Withdrawing consent may mean your request cannot be completed.
Retention
Data is kept only as long as needed for your request and the association's accountability obligations, then permanently deleted.