Privacy Policy

Effective 18 June 2026

Shifaia Health ("we", "us"), a product of Union Pharmaceutical (Cairo, Egypt), provides an AI clinical decision-support application for licensed healthcare professionals and students, and operates this website. This policy explains what we collect and how we handle it. Questions: zeyad@shifaia.com.

The most important point: Direct patient identifiers — name, national/chart ID, phone — remain on the clinician's own device and are never written to our cloud servers or sent to any AI model. Clinical data stored in the cloud is de-identified.

1. Patient data stays with you

The treating clinician is the data controller for their patients. The app is designed so that patient-identifying information stays on your device; only de-identified clinical data (such as age, sex, symptoms, diagnoses and medications) is stored in the cloud, and no patient identifiers are ever transmitted to the AI models that help generate assessments. Use sharing features (e.g. sending a prescription over WhatsApp) only with the patient's agreement, and obtain any consent required by law.

2. Information we collect

Professional account data: your name, email, professional category, and syndicate/licence details (or university, faculty and study year for students), to create your account and verify eligibility.
De-identified clinical data: clinical fields without direct patient identifiers, used to produce and improve decision support.
Website / waitlist data: if you request early access, the email address and the role you submit.
Technical data: basic device and usage information needed to operate and secure the service.

3. How we use information

To provide and secure the service; run safety checks; verify professional eligibility; improve clinical quality and performance; and communicate with you about access and updates. We do not sell your data.

4. AI processing

Decision-support outputs are generated in part by AI models. Only de-identified clinical inputs are sent for processing; patient identifiers are removed and never transmitted.

5. Where data is stored

Account and de-identified clinical data are hosted with our infrastructure provider (Supabase) in the European Union (Frankfurt). Where data is processed outside Egypt, we rely on appropriate safeguards.

6. Sharing

We share data only with service providers that help us run the app (such as hosting and AI processing) under appropriate confidentiality and data-protection terms, and where required by law.

7. Retention

We keep account and de-identified clinical data for as long as your account is active and as needed for the purposes above and our legal obligations. Waitlist emails are kept until you ask us to remove them, or until we launch and migrate you to an account.

8. Your rights

Consistent with Egypt's Personal Data Protection Law (Law No. 151 of 2020), you may request access to, correction of, or deletion of your personal data, and you may withdraw consent. Contact zeyad@shifaia.com.

9. Security

We use encryption in transit and at rest, row-level access controls, SHA-256 hashing of identifiers used in processing, and audit logging. No system is perfectly secure; please keep your device and credentials protected.

10. Not for patients or children

The app is for licensed professionals and enrolled students — not for patients or the general public — and is not intended for anyone under 18.

11. Changes

We may update this policy; the effective date above reflects the latest version. Material changes will be notified in-app or by email.