Privacy Policy
Last updated: July 17, 2026. Your privacy is important to us. This policy explains how DocQura collects, uses, and protects your data.
DocQura ("we", "our", or "us") operates the docqura.com website, the DocQura patient mobile application, and the DocQura for Doctors mobile application. This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal information when you use our services.
1. Information We Collect
We collect information you provide directly: your name, phone number, email address (optional), and basic medical visit details (doctor name, appointment date, token number). For doctors and staff, we additionally collect professional credentials, clinic details, and scheduling preferences. We do not collect, store, or process medical records, diagnoses, prescriptions, or treatment details.
2. How We Use Your Information
Your information is used solely to provide queue management and appointment scheduling services. This includes: generating queue tokens, sending appointment notifications, displaying estimated wait times, and enabling doctor-patient queue communication. We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Data Security & Encryption
All data is transmitted over HTTPS with TLS encryption. Your data is stored in secure, SOC 2 Type II compliant infrastructure (Supabase / AWS). We implement Row-Level Security (RLS) on every database table, ensuring patients can only access their own appointments and doctors can only manage their own queues. Authentication is handled via secure OTP verification.
4. Row-Level Security (RLS)
DocQura enforces strict data isolation at the database level. Each user can only read and modify their own records. Clinic staff can only access data within their assigned clinic. Doctors can only view their own patients and queue. This is enforced server-side and cannot be bypassed by client-side manipulation.
5. Third-Party Services
We use the following trusted third-party services: Supabase (authentication & database hosting), Expo (mobile app delivery), and Vercel (website hosting). Each of these services maintains their own privacy policies and complies with industry security standards. We do not integrate with any advertising networks or analytics tracking services.
6. Data Retention
Your appointment history is retained to provide you with past visit records. You may request deletion of your account and all associated data at any time by contacting us at support@docqura.com. Upon account deletion, all personal data including appointment history, profile information, and queue records will be permanently removed within 30 days.
7. Your Rights
You have the right to: (a) access all personal data we hold about you, (b) request correction of inaccurate data, (c) request deletion of your account and data, (d) withdraw consent for data processing at any time, and (e) export your data in a portable format. To exercise any of these rights, contact us at support@docqura.com.
8. Children's Privacy
DocQura does not knowingly collect personal information from children under 13. The appointment booking for minors is done through their parent or guardian's account using the family member feature. If you believe a child has provided us with personal data without parental consent, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of DocQura after such changes constitutes your acceptance of the updated policy.
Questions About Your Privacy?
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us.
support@docqura.com