Privacy Policy

Effective Date: February 21, 2026
App Name: TabeebX
Package: com.tabeebx.android (Google Play) · com.tabeebx.ios (App Store)
Developer: TabeebX
Platforms: Google Play Store & Apple App Store

Welcome to TabeebX. We are committed to protecting the privacy and security of your personal and health-related information. This Privacy Policy describes how we collect, use, share, and safeguard your data when you use the TabeebX mobile application ("App") and related services.

By using TabeebX, you agree to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please do not use our App.

1. Information We Collect

We collect different types of information depending on how you interact with the App.

1.1 Information You Provide Directly

Phone Number: Collected during sign-up for authentication via Firebase Phone Auth (SMS or WhatsApp OTP verification).
Profile Information: Your name, profile photo, and city-level location (we do not collect precise GPS data).
Appointment Data: When you book a consultation, we store the selected doctor, date, time slot, and booking history.
Health Information: Health metrics (such as heart rate and blood pressure) and medical reports you choose to view or share within the App.
Payment Information: When making payments, your transaction details are processed by a third-party payment processor. We do not store your full credit card number or CVV.
In-Call Messages: Text messages exchanged during a video consultation session.

1.2 Information Collected Automatically

Device Information: Device type, operating system version, and unique device identifiers for push notification delivery.
Push Notification Tokens: We use Firebase Cloud Messaging (FCM) to send you appointment reminders and updates. Your device token is stored for this purpose.
Language Preference: Your selected language is stored locally on your device.
Cached Data: Images (such as doctor profile photos) may be cached locally on your device for performance.

1.3 Information We Do Not Collect

We do not record video or audio from consultations unless explicitly stated otherwise.
We do not collect precise GPS or real-time location data.
We do not store full payment card details on our servers.

2. How We Use Your Information

We use the information we collect for the following purposes:

Authentication & Account Management: To verify your identity, create your account, and manage your profile.
Providing Telehealth Services: To facilitate video consultations, appointment scheduling, and in-call messaging between patients and doctors.
Health Metrics & Reports: To display your health data and medical reports within the App.
Payment Processing: To process payments securely through our third-party payment providers.
Notifications: To send you appointment reminders, booking confirmations, and service updates via push notifications.
Improving the App: To analyze usage patterns (in aggregate, non-identifying form) and improve App features and user experience.
Legal Compliance: To comply with applicable laws, regulations, and legal obligations.

We do not sell your personal data. We may share your information with the following parties only as necessary to provide our services:

3.1 Third-Party Service Providers

Service	Provider	Purpose
Authentication	Firebase Authentication (Google)	Phone number verification via SMS/WhatsApp OTP
Push Notifications	Firebase Cloud Messaging (Google)	Delivering appointment reminders and updates
Network Communication	Dio (HTTP client)	Secure data transfer between app and servers
Image Caching	Cached Network Image	Efficient on-device image display
Payment Processing	Third-party payment processor	Processing credit card, digital wallet, and voucher payments

These providers have their own privacy policies and are bound by data processing agreements with us.

3.2 Healthcare Providers

When you book and attend a consultation, your relevant profile and health information is shared with the consulting doctor to provide medical services.

3.3 Legal & Regulatory

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Storage & Security

We take the security of your data seriously and implement industry-standard measures to protect it:

Encryption in Transit: All data transferred between the App and our servers is encrypted using TLS/SSL protocols.
Secure On-Device Storage: Sensitive tokens and credentials are stored using Flutter Secure Storage — leveraging Keychain on iOS and EncryptedSharedPreferences on Android.
Server Security: Our backend infrastructure employs firewalls, access controls, and monitoring to prevent unauthorized access.
Real-Time Communication: Video and audio streams during consultations are transmitted in real-time and are not recorded on our servers unless explicitly communicated to you.
Access Controls: Only authorized personnel have access to user data, and access is limited based on role and necessity.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We encourage you to keep your device and App up to date.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law:

Account Data: Retained for the duration of your active account. Upon account deletion, your data is permanently removed within 30 days, unless retention is required by law.
Appointment & Health Data: Retained as long as your account exists or as required by healthcare regulations.
Payment Records: Transaction records may be retained for up to 7 years to comply with financial regulations.
Push Notification Tokens: Automatically removed when you uninstall the App or revoke notification permissions.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request that we correct inaccurate or incomplete data.
Right to Deletion: Request that we delete your personal data, subject to legal retention requirements.
Right to Data Portability: Request your data in a structured, machine-readable format.
Right to Withdraw Consent: Withdraw your consent for data processing at any time (this may affect App functionality).
Right to Object: Object to certain processing activities, including direct marketing.
Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.

To exercise any of these rights, please contact us at support@tabeebx.com. We will respond to your request within 30 days.

If you are located in the European Economic Area (EEA), we process your data under the following legal bases:

Consent: When you provide explicit consent (e.g., agreeing to this Privacy Policy, opting in to notifications).
Contract Performance: When processing is necessary to deliver the services you requested (e.g., booking appointments, conducting consultations).
Legitimate Interests: For improving our services, ensuring security, and preventing fraud.
Legal Obligation: When we are legally required to process or retain your data.

You have the right to lodge a complaint with your local Data Protection Authority if you believe your rights have been violated.

8. CCPA Compliance (California Users)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You may request the deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email us at support@tabeebx.com.

9. Children's Privacy (COPPA)

TabeebX is not intended for use by children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children under 13.

If we become aware that we have collected data from a child under 13 without parental consent, we will take immediate steps to delete that information. If you believe a child has provided us with personal data, please contact us at support@tabeebx.com.

10. Cookies & Tracking Technologies

The TabeebX mobile application does not use browser cookies. However, we may use the following technologies:

Firebase Analytics: May collect anonymized usage data to help us understand how users interact with the App.
Local Storage: Language preferences and cached content are stored locally on your device.
Device Identifiers: Used solely for push notification delivery via Firebase Cloud Messaging.

You can manage notification permissions and clear cached data through your device's system settings.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including countries where our servers and third-party service providers are located. We ensure that appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by relevant authorities.
Data processing agreements with all third-party providers.
Compliance with applicable data transfer regulations.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or App features. When we make significant changes:

We will update the "Effective Date" at the top of this page.
We will notify you through the App via a push notification or in-app notice.
Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

We encourage you to review this policy periodically.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: support@tabeebx.com
Website: https://tabeebx.com
App: TabeebX (available on Google Play Store & Apple App Store)