Privacy Policy – CareCenter

1. Our Core Privacy Commitment (Ephemeral & Purpose-Limited Data Use)

We NEVER sell, rent, monetize, or trade any personal health or contact information to third-party advertisers, data brokers, or external entities.

2. Information We Collect

To facilitate doctor appointments and healthcare operations, we collect only the minimum necessary information:

• Patient Contact Information: Name, phone number (WhatsApp number), and email address.
• Appointment Data: Requested doctor, clinic/hospital branch, date, preferred time slot, and appointment status.
• Healthcare Provider Information: Doctor profile, specialization, clinic address, and operational availability schedules.
• Technical Metadata: WhatsApp message IDs, delivery timestamps, and authentication tokens required for secure communication.

3. How We Use Your Information

Your information is used strictly to:

• Process and confirm doctor appointment requests.
• Send real-time appointment reminders, schedule updates, or cancellation notices via WhatsApp.
• Enable clinics and verified doctors to view their daily consultation rosters.
• Authenticate healthcare providers and maintain secure platform operations.
• Fulfill statutory healthcare record-keeping requirements where applicable.

4. WhatsApp Business Platform & Meta Integration

CareCenter integrates with the official Meta WhatsApp Business Cloud API and Embedded Signup as a Technical Solution Provider to enable automated appointment booking:

• Messages sent through WhatsApp are processed via Meta’s secure Cloud API infrastructure in compliance with Meta Developer Policies and WhatsApp Business Terms.
• We only message users who have initiated a conversation or explicitly opted in to receive appointment notifications.
• We do not send unsolicited marketing, promotional spam, or cross-promotional advertisements.

5. Data Sharing and Disclosure

We maintain strict zero-sharing policies. Data is disclosed only under the following limited scenarios:

• With the Selected Doctor / Clinic: Patient details and requested time slots are shared exclusively with the healthcare center where the appointment is booked.
• Essential Infrastructure Service Providers: Encrypted message delivery via Meta WhatsApp Cloud API and cloud hosting (e.g., Firebase / AWS) governed by strict confidentiality and data processing agreements.
• Legal Compliance: When required by applicable law, court order, or governmental healthcare authority.

6. Data Retention & Ephemeral Processing

Communication payloads and temporary session tokens are ephemeral and processed in-memory to complete booking transactions. Appointment transaction summaries are retained only for the period mandated by clinic operational policies or medical records regulations, after which they are securely purged or anonymized.

7. Data Security Safeguards

We implement industry-standard encryption protocols (HTTPS/TLS in transit and AES-256 at rest), strict role-based access control (RBAC), and continuous monitoring to safeguard patient and provider information against unauthorized access, loss, or disclosure.

8. User Rights & Data Deletion

You have the right to access, review, modify, or permanently delete your personal information at any time.

To exercise your data deletion rights, you can visit our Data Deletion Instructions Page or email our privacy team directly.

9. Children’s Privacy

CareCenter is not directed to individuals under 18 years of age without parental or legal guardian consent. Any pediatric appointment must be scheduled by a parent or legal guardian.