Privacy Policy for the "Ana 57357" app
This policy explains how Children's Cancer Hospital Foundation - Egypt 57357 ("the Hospital", "we") collects, uses and protects your personal and health information when you use the Ana 57357 mobile app or the web portal ana.57357.org ("the Service"). By using the Service you confirm that you have read this policy. It complements the Electronic Communications Terms and Conditions you accept when creating an account.
1. Who may use the Service
The Service is available to patients aged 16 or over and to a patient's parent, guardian or legal representative. If the patient is under 21 or lacks legal capacity, the account is created and this policy accepted by their parent, guardian or legal representative.
2. Information we collect
Identity and account data: name, national ID number, nationality, the mobile number registered at the Hospital, email address, password (encrypted), relationship to the patient, the patient's medical record number, and a profile photo if you choose to add one.
Health data: what the Service shows you from the patient's medical record at the Hospital: appointments, lab and radiology results, medical reports, medications and doses, diagnosis and treatment protocol, notes, and pain levels if you record them.
What you send us: complaints, inquiries and suggestions; report, reschedule and refill requests; survey answers; and any attachments you add.
Device and usage data: device type, operating system, app version, push-notification token, language, and the sign-in and error logs needed to run and secure the Service. The app uses no third-party analytics, tracking or crash-reporting tools.
Biometrics: fingerprint or face sign-in is handled entirely on your device by its operating system; no biometric data reaches the Hospital.
3. Why we use it
- To verify your identity and link your account to the correct medical record.
- To show the patient's medical information and support the treatment journey.
- To send care-related notifications, SMS and emails: results, appointment and dose reminders, request updates.
- To answer complaints and inquiries and improve service quality.
- To secure the Service and prevent unauthorised use.
- To meet the Hospital's legal and regulatory obligations.
We do not use your data for advertising and we never sell it.
4. Basis for processing
We process your data on the basis of your voluntary consent given when creating the account, the healthcare relationship between the patient and the Hospital, and the Hospital's legal obligations. You may withdraw consent to electronic communications at any time as described in section 8, without affecting the patient's right to receive care.
5. Who can see it
- The Hospital's clinical and administrative staff, to the extent their duties require.
- Approved service providers working on the Hospital's behalf (hosting, SMS, email, push notifications, technical support), contractually bound to protect the data and not use it for their own purposes.
- Public authorities where required by law.
Patient data is not shared with anyone else without your consent except where the law requires it.
6. Security
We use appropriate technical and organisational measures, including encryption in transit and at rest, code verification to your phone and email at registration, and access limited to authorised staff. Channels such as SMS and email may carry risks beyond the Hospital's control, so medical information is sent inside the app and the secure portal wherever possible.
Your part: keep your password and verification codes private, do not share a screenshot of your QR code, sign out when using a phone that is not yours, and tell us immediately if your device is lost or you suspect unauthorised access.
7. Retention
Account data is kept while the account is active. Medical records and communication logs are kept for the periods required by applicable law and Hospital policy, even after the account is closed, for medical, legal and audit purposes.
8. Your rights
At any time, through the contacts below or in the app settings where available, you can:
- Access your personal data and ask for it to be corrected or updated.
- Change your phone number or email (the number registered at the Hospital is changed at the reception desk).
- Turn notifications off in the app or phone settings.
- Withdraw consent to electronic communications in writing or through the Hospital's approved method.
- Ask for your account to be closed [and non-medical account data deleted].
- Raise a privacy question or complaint.
We respond to requests and will notify you of any security incident involving your data where the law requires it.
9. Children
Child patients' data is shown only to their parent, guardian or legal representative through a verified account. We do not create accounts for anyone under 16.
10. Phone permissions
The app asks for notification permission to send alerts; fingerprint or face permission if you enable biometric sign-in; calendar permission when you add an appointment to your phone calendar; and photo or camera permission when you change your profile picture. You can refuse or revoke any permission in your phone settings; only the related feature is affected.
11. External links
The Service may link to other sites or services (such as donations or educational content). Those sites are not covered by this policy.
12. Changes
We may update this policy from time to time and will announce material changes in the app or by email. The "Last updated" date above shows the current version.
13. Contact
Children's Cancer Hospital Foundation - Egypt 57357
1 Sekat Hadid Al Mahger, Zeinhom, El Sayeda Zeinab, Cairo Governorate
App support: [email protected]
Hotline: 19057 (within Egypt)