Privacy Policy

1. Introduction

Welcome to SALAM Hospitals App ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using SALAM Hospitals App, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you register and use SALAM Hospitals App, we collect the following personal information:

• Account Information: Username, password, full name, email address, phone number
• Identification Information: IC type (IC, Passport, PRIC), IC number or passport number
• Profile Information: Preferred language (English/Malay), notification preferences
• Authentication Data: Login credentials, session tokens, refresh tokens

2.2 Patient Information

To facilitate healthcare appointments, we collect:

• Patient Details: Patient name, date of birth, gender, relationship to user
• Medical Record Information: Medical Record Number (MRN) assigned by healthcare facilities
• Representative Information: Representative name and relationship (for dependents)

2.3 Appointment Data

• Appointment requests and confirmations
• Hospital and healthcare facility information
• Doctor and department preferences
• Visit purpose and medical service information
• Appointment dates, times, and status

2.4 Device and Technical Information

• Device Information: Device type, operating system (iOS/Android), app version
• Device Tokens: Push notification tokens for mobile notifications
• Usage Data: App interactions, features used, login history
• Network Information: IP address, connection type

2.5 Communication Data

• Email addresses for appointment notifications
• Notification preferences (push notifications, email notifications)
• Reminder settings and preferences

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Process and manage healthcare appointment requests
• Facilitate communication with healthcare facilities
• Send appointment confirmations, updates, and reminders
• Maintain Medical Record Numbers (MRN) for hospital visits

3.2 Communication

• Send appointment-related notifications via push notifications and email
• Provide appointment reminders based on your preferences
• Send service updates and important announcements
• Respond to your inquiries and support requests

3.3 Service Improvement

• Analyze usage patterns to improve app functionality
• Monitor and maintain app performance
• Develop new features and services
• Ensure platform security and prevent fraud

3.4 Legal Compliance

• Comply with applicable laws and regulations
• Maintain audit logs for security purposes
• Respond to legal requests and prevent harm

4. Information Sharing and Disclosure

4.1 Healthcare Facilities

We share your appointment and patient information with healthcare facilities (hospitals, clinics) solely for the purpose of processing your appointment requests. This includes:

• Patient identification information
• Appointment details and preferences
• Medical Record Numbers (MRN)
• Contact information for appointment confirmations

4.2 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Email and push notification delivery
• Analytics and app performance monitoring
• Customer support services

These service providers are contractually obligated to use your information only for the purposes we specify and to protect your information.

4.3 Legal Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or the public
• Detect, prevent, or address fraud or security issues

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: Data transmission is secured using industry-standard encryption protocols (HTTPS/TLS)
• Password Protection: User passwords are securely hashed and never stored in plain text
• Access Controls: Strict access controls limit who can view or process your information
• Secure Storage: Data is stored in secure, access-controlled databases
• Regular Audits: We maintain comprehensive audit logs of all data access and modifications
• Token Authentication: Session tokens and refresh tokens have limited validity periods

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to using commercially reasonable efforts to protect your data.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Active Accounts: Information is retained while your account is active
• Appointment Records: Appointment history is maintained for medical record-keeping purposes
• Audit Logs: Security and audit logs are retained according to legal requirements
• Deleted Accounts: Upon account deletion, personal information is removed or anonymized within a reasonable timeframe, except where retention is required by law

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Update

• Access your personal information through your account profile
• Update or correct your information at any time
• Review your appointment history and patient records

7.2 Notification Preferences

• Enable or disable push notifications
• Enable or disable email notifications
• Customize appointment reminder settings (1, 3, 6, 12, 24, or 48 hours before appointment)
• Change your preferred language (English/Malay)

7.3 Account Management

• Change your password at any time
• Request account deletion
• Export your data (upon request)

7.4 Data Portability

You have the right to request a copy of your personal information in a structured, commonly used format.

7.5 Withdrawal of Consent

You can withdraw your consent for data processing at any time by discontinuing use of the Service or requesting account deletion.

8. Children's Privacy

SALAM Hospitals App is designed for users 18 years of age and older. We do not knowingly collect personal information from children under 18 without parental consent. The app does allow registered users to create patient profiles for dependents (minors), but the account holder must be an adult.

If you believe we have collected information from a child without proper consent, please contact us immediately, and we will take steps to remove such information.

9. International Data Transfers

Your information may be transferred to and stored on servers located outside of your country of residence. By using SALAM Hospitals App, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Third-Party Services and Links

Our Service may integrate with or contain links to third-party services, such as:

• Healthcare facility systems
• Social media authentication (Google, Facebook)
• Payment processors (if applicable)

These third-party services have their own privacy policies. We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify you via email or in-app notification
• Your continued use of the Service after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Cookie Policy

SALAM Hospitals App uses the following types of data storage:

• Authentication Tokens: To maintain your logged-in session
• Preferences: To remember your notification and language settings
• Cache: To improve app performance and user experience

We do not use tracking cookies for advertising purposes.

13. Contact Us

We will respond to your inquiry within 30 days of receipt.

14. Consent

By using SALAM Hospitals App, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.