Privacy Policy
Introduction
This policy explains what data the FastDoctor IQ apps (FastDoctor for patients, FastDoctor Pro for providers) collect and why, who can see it, and how to delete your account. The service is available in Iraq only and is not for emergencies.
Data we collect
- Account data: name, phone number, email, and a second phone number if you add one.
- Addresses: the addresses you save, plus the landmark, floor and directions you type.
- Location: read only while the app is open in front of you, and only with your permission. Patients: when you choose "use my current location" for the visit address. Providers: when setting their registered location; about every 90 seconds while the app is open in front of them and they are "available", so they get the requests that are actually near them (we keep only the latest position and delete it when they go unavailable); and during an active visit, to show their arrival to the patient. We never track location in the background.
- Medical profile (yours and each family member you add): date of birth, sex, chronic conditions, allergies, medications, medical history, and important notes pinned by a provider.
- Files: medical files you upload, chat photos, provider documents (ID and professional licence), and wallet top-up receipts.
- Chat: messages and photos between the patient and the provider of each request.
- Requests and visits: service type, description, times, status, price, ratings, complaints, and the visit record written by the provider.
- Notifications: your device's push token (Firebase Cloud Messaging).
- Crash reports: technical details about a crash and the device (Firebase Crashlytics), never the content of your medical profile.
Why we use it
- To send your request to nearby providers and get them to you.
- So the provider knows what they need to treat you safely.
- To contact you about your requests, for support, and to resolve complaints and disputes.
- To protect the platform from abuse and to comply with the law.
We do not sell your data and do not use it for advertising.
Who can see your data
- A provider before accepting: service type, description, approximate distance, and the medical side of the profile without your name.
- The provider after accepting and during the visit: name, phone number, address, and the full medical profile.
- After the visit: the provider sees only their own notes.
- Platform administrators: when needed for support or a dispute; administrator access to chats is logged.
- Technical service providers: Google Firebase (notifications and crash reports) and OpenStreetMap (map images).
- Authorities: only when the law requires it.
Payment
You pay the provider in cash directly; we do not collect or store bank card details. Providers' wallet records (commissions and top-ups) are kept for financial purposes.
How long we keep data
We keep your data while your account is active. When you delete your account we delete your personal data as described below.
Deleting your account
You can delete your account in the app: Settings -> "Delete account", or from the deletion request page on our website without the app.
On deletion we delete: your name, phone and email, addresses, family members, medical profile, files you uploaded, chats, push tokens and sign-in sessions. For providers we also delete their documents and location.
We keep only what the law requires, without anything that identifies you: completed visit records (date, service type and the medical visit record), and providers' wallet financial records.
An account cannot be deleted during an active visit.
Security
We use encrypted connections and limited access rights, and only the provider assigned to your visit can see your medical profile.
Children
Accounts are created by an adult, who can add family members (including children) and manage their medical profiles.
Changes to this policy
We may update this policy; the date of the last update is shown at the top of the page.
Contact
Questions about your privacy: the "Contact us" option in the app.