Privacy Policy

1. Introduction

Docline ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal wellness application.

2. Information We Collect

2.1 Personal Information

• Full name, email address, phone number
• Date of birth, gender, address
• Profile pictures

2.2 Wellness Information

• Personal health notes and wellness journal entries
• Conversation notes from wellness sessions
• Personal health goals and lifestyle preferences
• Video conversation recordings (with your consent)

2.3 Advisor Information (For Health Advisors)

• Professional background and experience
• Specialization areas (nutrition, fitness, mental wellness, etc.)
• Qualifications and certifications

2.4 Technical Information

• Device information and operating system
• App usage patterns and analytics
• IP address and location data
• Push notification tokens

3. How We Use Your Information

3.1 Primary Purposes

• Connect you with wellness advisors for health conversations
• Schedule and manage wellness sessions
• Maintain your personal wellness journal and notes
• Enable communication between users and advisors
• Process payments for sessions

3.2 Secondary Purposes

• Improve app functionality and user experience
• Send session reminders and notifications
• Conduct quality assurance
• Comply with legal and regulatory requirements

4. Legal Basis for Processing

• Consent: You have given clear consent for us to process your personal data
• Contract: Processing is necessary for the performance of our wellness services
• Legal Obligation: We may process data to comply with applicable regulations

5. Information Sharing and Disclosure

5.1 With Wellness Advisors

• Your wellness advisors during sessions
• Specialists for wellness referrals (with your consent)

5.2 With Third-Party Service Providers

• Cloud storage providers: Supabase for database and storage
• Authentication services: Supabase Auth, Google Sign-In
• Messaging services: Firebase Cloud Messaging for notifications
• Video conferencing services: ZegoCloud for video conversations
• Calendar services: Google Calendar (when enabled by user)
• Payment processing: Bank of Khartoum for secure transactions

5.3 Legal Requirements

We may disclose your information when required by law, including:

• Court orders or legal processes
• Regulatory investigations
• Protection of rights and safety

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• End-to-end encryption for communications
• Secure cloud storage with access controls
• Regular security audits and assessments
• Staff training on data protection
• Incident response procedures

7. Data Retention

7.1 While Your Account is Active

• Wellness notes: Retained for the duration of your account
• Personal information: Retained while your account is active
• Communications: Retained according to your preferences

7.2 When You Delete Your Account

• All data is permanently deleted within 30 days of your deletion request
• This includes all personal information, wellness notes, communications, and contacts
• Some anonymized data may be retained for legal compliance only
• You will receive confirmation once deletion is complete

7.3 Legal Requirements

• Tax and billing records may be retained for legal compliance periods
• If legal requirements apply, we will notify you and retain only the minimum necessary data
• Once legal retention periods expire, all remaining data will be deleted

8. Your Rights

8.1 Access and Portability

• Request copies of your personal data
• Receive data in a portable format
• Access your wellness notes and history

8.2 Correction and Updates

• Correct inaccurate information
• Update your profile and preferences
• Modify consent preferences

8.3 Right to Delete Your Account

You have the absolute right to delete your account at any time. You can do this through:

• App settings → Account → Delete Account
• Contacting our Data Protection Officer
• Sending a written request to mohammedaliedriis@gmail.com

8.4 Deletion and Restriction

• Request deletion of specific data without deleting your account
• Restrict processing of your information
• Object to certain data processing

8.5 Withdrawal of Consent

• Withdraw consent at any time
• Opt-out of non-essential communications
• Control data sharing preferences

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through:

• Standard contractual clauses
• Adequacy decisions
• Appropriate safeguards

10. Administrative Access and System Management

10.1 Administrator Roles and Access

Our platform includes administrative users who have access to certain data for operational purposes:

Admin Responsibilities:

• Verify wellness advisor credentials and qualifications
• Process user credit recharge requests
• Process advisor withdrawal requests
• Manage platform categories and wellness tips
• View system statistics and performance metrics
• Resolve user support issues

Admin Access to Data:

• User profiles and verification status
• Transaction and balance information
• Session records for support purposes
• System health and usage statistics
• Communications for dispute resolution

Admin Data Protection:

• All admin access is logged and monitored
• Admins are bound by strict confidentiality agreements
• Access is limited to what's necessary for their duties
• Regular audits of admin activities

10.2 Third-Party Service Details

Supabase (Database and Storage):

• Hosts user data and wellness notes
• Provides secure authentication
• Data encrypted at rest and in transit
• Privacy Policy: https://supabase.com/privacy

Firebase (Notifications):

• Sends push notifications for messages and sessions
• Privacy Policy: https://firebase.google.com/support/privacy

ZegoCloud (Video Calls):

• Facilitates video conversations
• Privacy Policy: https://www.zegocloud.com/privacy-policy

Google Services (Optional):

• Google Sign-In for authentication
• Google Calendar for session sync (user must enable)
• Privacy Policy: https://policies.google.com/privacy

Bank of Khartoum (MBOK):

• Processes user credit recharges
• Handles advisor withdrawals
• We do not store your banking credentials

11. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16 without parental consent. Age verification is required during signup.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through:

• In-app notifications
• Email notifications
• Website updates

13. Contact Information

For privacy-related questions or requests, contact us:

14. Complaints and Disputes

If you have concerns about our data practices:

1. Contact our Data Protection Officer at mohammedaliedriis@gmail.com
2. File a complaint with the relevant data protection authority
3. Seek resolution through alternative dispute mechanisms

15. Important Disclaimer