Privacy Policy
Dr. Eyas Medanat patient app · Last updated 13 September 2026
This policy explains what the Dr. Eyas Medanat mobile app collects, why, and what you can ask us to do about it. It covers the app only. Records held at the clinic are governed by Dubai Health Authority requirements and by the consent you gave in person.
Who we are
Dr. Eyas Medanat, Specialist Surgeon (MRCS England), DHA-licensed.
Unit 303, 3rd Floor, Block B, Ibn Sina Building 27, Dubai Healthcare City, Dubai, UAE.
Contact: info@eyas.doctor · +971 50 108 8378
What the app collects
| Your mobile number | Used to sign you in. A one-time code is sent to it, and the verified number is how the app finds your file. Handled by Google Firebase Authentication. |
|---|---|
| Your name, and email if you give one | To create or match your patient file. Optional email; the app works without it. |
| Your treatment record | Read from the clinic's records so you can see your own history, appointments and loyalty points. The app does not create clinical records. |
| Appointment requests | The treatment, date, time and any note you type when you ask for an appointment. |
| Notification token | An anonymous device identifier from Google, so the clinic can send you a reminder or a message. Removed when it stops working. |
| That you use the app | The date you last opened it and whether it is Android or iOS, so reception knows whether "it's in the app" is useful advice. |
What the app does not do
- No advertising, no advertising identifiers, and no analytics or tracking SDKs.
- Your data is never sold, rented, or shared for marketing.
- No access to your contacts, photos, microphone, camera or precise location.
- Face ID or your fingerprint, if you switch that on, is checked by your phone and never leaves it. We receive only a yes or no.
Where it is held
In Google Firebase (Firestore and Authentication), operated by Google LLC. Access is restricted by security rules so that a signed-in patient can read their own record and nobody else's. Clinic staff access is limited to authorised accounts.
Who else sees it
Only Google, as the hosting provider, and only to run the service. We use no other third parties. We disclose records otherwise only where UAE law or a DHA requirement obliges us to.
How long we keep it
Medical records are retained for the period UAE healthcare regulation requires. App-specific data — your notification token and the date you last opened the app — is deleted when you ask, or when the token stops working.
Your choices
- Notifications can be refused when asked, or switched off in your phone's settings. The app works without them.
- Signing out removes the copy of your record held on the handset.
- Deleting your app data. You can do this yourself, from inside the app: open the Profile tab and tap Delete my profile. This deletes your app records — your profile in the app, your notification token, and the record of when and on what device you last used it — and disconnects the app from your clinic record. It takes effect immediately: nothing is emailed, and nobody has to approve it. You can also email info@eyas.doctor and we will do it for you.
- What that does not remove. Your treatment history is a medical record, and UAE healthcare regulation requires the clinic to keep it, so it stays with the clinic. To use the app again afterwards, ask us to reconnect you.
- Asking the clinic to erase everything. The same dialog has Request full deletion, which opens a message to info@eyas.doctor (or WhatsApp) asking the clinic to erase everything it holds about you. We reply within 30 days. Where regulation requires a record to be kept, we will tell you what is retained and for how long.
- A copy of your record can be requested from the clinic at any time.
Children
The app is not intended for anyone under 18. A minor's treatment is arranged by a parent or guardian through the clinic.
Changes
If this policy changes materially we will update the date at the top and, where the change affects what we collect, tell you in the app.